CVE-2021-30658 — Download of Code Without Integrity Check in Apple Macos

CWE-494 — Download of Code Without Integrity Check3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 74.45%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple Macos BIG SUR

Timeline

PublishedSep 8

Latest updateMay 24

Description

This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Big Sur 11.3. A malicious application may bypass Gatekeeper checks.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5apple/macosunspecified — 11.3

▶NVDapple/macos11.0 — 11.3

▶Appleapple/macos_big_sur11.3

🔴Vulnerability Details

GHSA

GHSA-x6vc-6hx9-wx4j: This issue was addressed with improved handling of file metadata↗2022-05-24

▶

📋Vendor Advisories

Apple

CVE-2021-30658: macOS Big Sur 11.3↗2021-04-26

▶