CVEvulnerability
CVE-2021-30770
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:N
- Weaknesses
- CWE-287
Description
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
Affected configurations
• apple iphone os (< 14.7)
• apple tvos (< 14.7)
• apple watchos (< 7.6)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://support.apple.com/en-us/HT212601 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212604 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212605 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212601 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212604 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212605 Release Notes, Vendor Advisory