CVE-2021-1829 — Type Confusion in Apple Macos

CWE-843 — Type Confusion3 documents3 sources

Severity

9.8CRITICALNVD

EPSS

0.8%

top 25.25%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple Macos BIG SUR

Timeline

PublishedSep 8

Latest updateMay 24

Description

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5apple/macosunspecified — 11.3

▶NVDapple/macos11.0 — 11.3

▶Appleapple/macos_big_sur11.3

🔴Vulnerability Details

GHSA

GHSA-fgc6-r27g-4r9x: A type confusion issue was addressed with improved state handling↗2022-05-24

▶

📋Vendor Advisories

Apple

CVE-2021-1829: macOS Big Sur 11.3↗2021-04-26

▶