Actively exploited · Published Oct 19, 2021 · Assigned by apple

CVE-2021-30807

High 7.8 Exploited

In plain English

A high-severity out-of-bounds write in macOS from Apple. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). The chance it is exploited in the next 30 days is estimated at 28.8% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)28.8%top 1.8% of all CVEs

Exploited in the wildYesCISA KEV since Nov 3, 2021

Attack tooling1Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Nov 17, 2021.

Official description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

Affected products (as reported)

Vendor	Product	Versions
Apple	macOS	unspecified – before 11.5
Apple	macOS	unspecified – before 14.7
Apple	macOS	unspecified – before 7.6

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

https://support.apple.com/en-us/HT212622 x_refsource_MISC
https://support.apple.com/en-us/HT212623 x_refsource_MISC
https://support.apple.com/en-us/HT212713 x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30807 government-resource