First published: Tue Aug 24 2021(Updated: )
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to access a user's files.
Credit: Csaba Fitzl @theevilbit Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityCsaba Fitzl @theevilbit Offensive Security cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple watchOS | <8.3 | 8.3 |
Apple iOS | <15.2 | 15.2 |
Apple iPadOS | <15.2 | 15.2 |
Apple macOS Monterey | <12.1 | 12.1 |
Apple macOS Big Sur | <11.6.2 | 11.6.2 |
Apple tvOS | <15.2 | 15.2 |
Apple iPadOS | <15.2 | |
Apple iPhone OS | <15.2 | |
Apple macOS | >=11.0<11.6.2 | |
Apple macOS | >=12.0<12.1 | |
Apple tvOS | <15.2 | |
Apple watchOS | <8.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-30947 is a vulnerability in macOS, iOS, watchOS, and tvOS that allows an application to access a user's files.
CVE-2021-30947 affects macOS Big Sur, macOS Monterey, iOS, iPadOS, watchOS, and tvOS.
CVE-2021-30947 has a severity rating of 5.5, which is considered medium.
CVE-2021-30947 is fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, iOS 15.2, iPadOS 15.2, watchOS 8.3, and tvOS 15.2. It is recommended to update to these versions to fix the vulnerability.
You can find more information about CVE-2021-30947 on the Apple Security Updates page.