CVE-2021-30669 — Download of Code Without Integrity Check in Apple Macos

CWE-494 — Download of Code Without Integrity Check6 documents4 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 72.96%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple MAC OS X

Timeline

PublishedSep 8

Latest updateMay 24

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may bypass Gatekeeper checks.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5apple/macosunspecified — 11.4+1

▶NVDapple/macos11.0 — 11.4

▶NVDapple/mac_os_x10.14 — 10.14.5+3

🔴Vulnerability Details

GHSA

GHSA-wrg7-24rr-rgcq: A logic issue was addressed with improved state management↗2022-05-24

▶

CVEList

CVE-2021-30669: A logic issue was addressed with improved state management↗2021-09-08

▶

📋Vendor Advisories

Apple

CVE-2021-30669: Security Update 2021-004 Mojave↗2021-05-24

▶

Apple

CVE-2021-30669: macOS Big Sur 11.4↗2021-05-24

▶

Apple

CVE-2021-30669: Security Update 2021-003 Catalina↗2021-05-24

▶