CVE-2021-31010: Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
First published: Tue Aug 24 2021(Updated: )
Core Telephony. A deserialization issue was addressed through improved validation.
Credit: Citizen Lab Google Project Zero Citizen Lab Google Project Zero Citizen Lab Google Project Zero cve@mitre.org Citizen Lab Google Project Zero Citizen Lab Google Project Zero product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS | <11.6 | 11.6 |
| macOS Catalina | ||
| Apple iOS, iPadOS, and watchOS | <14.8 | |
| iOS | >=12.0<12.5.5 | |
| iOS | >=14.0<14.8 | |
| Apple iOS and macOS | >=10.15<10.15.7 | |
| Apple iOS and macOS | =10.15.7 | |
| Apple iOS and macOS | =10.15.7-security_update_2020 | |
| Apple iOS and macOS | =10.15.7-security_update_2020-001 | |
| Apple iOS and macOS | =10.15.7-security_update_2020-005 | |
| Apple iOS and macOS | =10.15.7-security_update_2020-007 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-001 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-002 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-003 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-006 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-007 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-008 | |
| Apple iOS and macOS | =10.15.7-security_update_2022-001 | |
| Apple iOS and macOS | =10.15.7-security_update_2022-002 | |
| Apple iOS and macOS | =10.15.7-security_update_2022-003 | |
| Apple iOS and macOS | =10.15.7-security_update_2022-004 | |
| Apple iOS and macOS | =10.15.7-supplemental_update | |
| Apple iOS and macOS | >=11.0<11.6 | |
| Apple iOS, iPadOS, and watchOS | <7.6.2 | |
| Apple iOS, iPadOS, and watchOS | <12.5.5 | 12.5.5 |
| Apple iOS, iPadOS, and watchOS | <14.8 | 14.8 |
| Apple iOS, iPadOS, and watchOS | <14.8 | 14.8 |
| Apple iOS, iPadOS, and watchOS | <7.6.2 | 7.6.2 |
| Apple iOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212805 (Advisory)
- https://support.apple.com/en-us/HT212806 (Advisory)
- https://support.apple.com/en-us/HT212824 (Advisory)
- https://support.apple.com/en-us/HT212807 (Advisory)
- https://support.apple.com/en-us/HT212804,
- https://support.apple.com/en-us/HT212805,
- https://support.apple.com/en-us/HT212806,
- https://support.apple.com/en-us/HT212807,
- https://support.apple.com/en-us/HT212824;
- https://nvd.nist.gov/vuln/detail/CVE-2021-31010
- https://support.apple.com/en-us/HT212804 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30811
- CVE-2021-30838
- CVE-2021-30834
- CVE-2021-30928
- CVE-2021-30860
- CVE-2021-31010
- CVE-2021-30827
- CVE-2021-30828
- CVE-2021-30829
- CVE-2021-22925
- CVE-2021-30832
- CVE-2021-30841
- CVE-2021-30842
- CVE-2021-30843
- CVE-2021-30853
- CVE-2021-30933
- CVE-2021-30835
- CVE-2021-30847
- CVE-2021-30830
- CVE-2021-30865
- CVE-2021-30857
- CVE-2021-30859
- CVE-2021-30864
- CVE-2013-0340
- CVE-2021-30813
- CVE-2021-30819
- CVE-2021-30855
- CVE-2021-30925
- CVE-2021-30850
- CVE-2021-30845
- CVE-2021-30844
- CVE-2021-30858
- CVE-2021-30783
- CVE-2020-29622
- CVE-2021-30713
- CVE-2021-30869
- CVE-2021-30820
- CVE-2021-30905
- CVE-2021-30852
- CVE-2021-30826
- CVE-2021-30818
- CVE-2021-30823
- CVE-2021-30836
- CVE-2021-30848
- CVE-2021-30849
- CVE-2021-30846
Frequently Asked Questions
What is CVE-2021-31010?
CVE-2021-31010 is a vulnerability in Apple iOS, macOS, and watchOS that allows a sandboxed process to bypass sandbox restrictions.
How does CVE-2021-31010 affect Apple devices?
CVE-2021-31010 affects Apple devices running iOS, macOS, and watchOS.
What is the severity of CVE-2021-31010?
The severity of CVE-2021-31010 is not specified in the provided information.
How can I fix CVE-2021-31010?
To fix CVE-2021-31010, update your Apple devices to the recommended versions: iOS 12.5.5, macOS Big Sur 11.6, or watchOS 7.6.2.
Where can I find more information about CVE-2021-31010?
You can find more information about CVE-2021-31010 on the official Apple support page: [CVE-2021-31010](https://support.apple.com/en-us/HT212804)
- agent/type
- agent/title
- agent/weakness
- agent/severity
- agent/description
- agent/author
- agent/first-publish-date
- agent/event
- agent/trending
- collector/apple-support
- agent/software-canonical-lookup-request
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-cve
- collector/nvd-index
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- vendor/apple
- canonical/apple macos
- canonical/macos catalina
- canonical/apple ios, ipados, and watchos
- canonical/ios
- version/ios/12.0
- version/ios/14.0
- canonical/apple ios and macos
- version/apple ios and macos/10.15
- version/apple ios and macos/10.15.7
- version/apple ios and macos/10.15.7-security_update_2020
- version/apple ios and macos/10.15.7-security_update_2020-001
- version/apple ios and macos/10.15.7-security_update_2020-005
- version/apple ios and macos/10.15.7-security_update_2020-007
- version/apple ios and macos/10.15.7-security_update_2021-001
- version/apple ios and macos/10.15.7-security_update_2021-002
- version/apple ios and macos/10.15.7-security_update_2021-003
- version/apple ios and macos/10.15.7-security_update_2021-006
- version/apple ios and macos/10.15.7-security_update_2021-007
- version/apple ios and macos/10.15.7-security_update_2021-008
- version/apple ios and macos/10.15.7-security_update_2022-001
- version/apple ios and macos/10.15.7-security_update_2022-002
- version/apple ios and macos/10.15.7-security_update_2022-003
- version/apple ios and macos/10.15.7-security_update_2022-004
- version/apple ios and macos/10.15.7-supplemental_update
- version/apple ios and macos/11.0
- canonical/apple ios