CVE-2021-30833
published 2021-10-28CVE-2021-30833: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to…
PriorityP346medium5.5CVSS 3.1
AVLACLPRNUIRSUCNIHAN
EPSS
42.67%
98.6th percentile
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | — | — |
| apple | mac_os_x | >= 10.15 < 10.15.7 | 10.15.7 |
| apple | macos | < 12.0.1 | 12.0.1 |
| apple | macos | >= 11.6 < 11.6.1 | 11.6.1 |
| apple | macos | >= unspecified < 12.0 | 12.0 |
| apple | macos_big_sur | — | — |
| apple | macos_monterey | — | — |
| apple | security_update_2021-007_catalina | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2021-30833: macOS Big Sur 11.6.1
vendor_apple·2021-10-25·CVSS 5.5
CVE-2021-30833 [MEDIUM] CVE-2021-30833: macOS Big Sur 11.6.1
Apple Security Update: About the security content of macOS Big Sur 11.6.1
Product: macOS Big Sur
Version: 11.6.1
CVE: CVE-2021-30833
Component: Windows Server
Impact: A local attacker may be able to view the previous logged-in user’s desktop from the fast user switching screen
Description: An authentication issue was addressed with improved state management.
Apple
CVE-2021-30833: Security Update 2021-007 Catalina
vendor_apple·2021-10-25·CVSS 5.5
CVE-2021-30833 [MEDIUM] CVE-2021-30833: Security Update 2021-007 Catalina
Apple Security Update: About the security content of Security Update 2021-007 Catalina
Product: Security Update 2021-007 Catalina
CVE: CVE-2021-30833
Component: UIKit
Impact: A person with physical access to a device may be able to determine characteristics of a user's password in a secure text entry field
Description: A logic issue was addressed with improved state management.
Apple
CVE-2021-30833: macOS Monterey 12.0.1
vendor_apple·2021-10-25·CVSS 5.5
CVE-2021-30833 [MEDIUM] CVE-2021-30833: macOS Monterey 12.0.1
Apple Security Update: About the security content of macOS Monterey 12.0.1
Product: macOS Monterey
Version: 12.0.1
CVE: CVE-2021-30833
Component: Windows Server
Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen
Description: An authentication issue was addressed with improved state management.
GHSA
GHSA-j64f-jw3r-9c68: This issue was addressed with improved checks
ghsa_unreviewed·2022-05-24
CVE-2021-30833 [MEDIUM] GHSA-j64f-jw3r-9c68: This issue was addressed with improved checks
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-10-28
Published