First published: Tue Aug 24 2021(Updated: )
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.
Credit: chenyuwang @mzzzz__ Kirin @Pwnrin Tencent Security Xuanwu Labchenyuwang @mzzzz__ Kirin @Pwnrin Tencent Security Xuanwu Lab cve@mitre.org chenyuwang @mzzzz__ Kirin @Pwnrin Tencent Security Xuanwu Lab
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Monterey | <12.1 | 12.1 |
Apple Catalina | ||
Apple Mac OS X | >=10.15<10.15.7 | |
Apple Mac OS X | =10.15.7 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-002 | |
Apple Mac OS X | =10.15.7-security_update_2021-003 | |
Apple Mac OS X | =10.15.7-security_update_2021-004 | |
Apple Mac OS X | =10.15.7-security_update_2021-005 | |
Apple Mac OS X | =10.15.7-security_update_2021-006 | |
Apple Mac OS X | =10.15.7-security_update_2021-007 | |
Apple Mac OS X | =10.15.7-supplemental_update | |
Apple macOS | >=11.0<11.6.2 | |
Apple macOS | >=12.0<12.1 | |
Apple macOS | <11.6.2 | 11.6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-30976 is a vulnerability in LaunchServices that involves a logic issue and has been addressed with improved state management.
CVE-2021-30976 affects macOS Monterey 12.1 (and earlier versions), macOS Big Sur 11.6.2 (and earlier versions), and Apple Catalina.
Yes, Apple has provided a fix for CVE-2021-30976. Users should update their macOS to the latest available version.
More information about CVE-2021-30976 can be found on the Apple support page: [https://support.apple.com/en-us/HT212978](https://support.apple.com/en-us/HT212978)