CVE-2021-30727Apple IOS AND Ipados vulnerability

5 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 53.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 8
Latest updateMay 24

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. A malicious application may be able to modify protected parts of the file system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

NVDapple/tvos< 14.6
CVEListV5apple/macosunspecified11.4+2
NVDapple/macos11.0.111.4
NVDapple/ipados< 14.6
NVDapple/watchos< 7.5

🔴Vulnerability Details

1
GHSA
GHSA-qgp6-rp96-f6fw: A logic issue was addressed with improved state management2022-05-24

📋Vendor Advisories

3
Apple
CVE-2021-30727: tvOS 14.62021-05-24
Apple
CVE-2021-30727: macOS Big Sur 11.42021-05-24
Apple
CVE-2021-30727: watchOS 7.52021-05-24