CVE-2021-30704

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. An application may be able to execute arbitrary code with kernel privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
VendorProductVersion
appleipados
𝑥
< 14.6
appleiphone_os
𝑥
< 14.6
applemac_os_x
10.14 ≤
𝑥
≤ 10.14.5
applemac_os_x
10.15 ≤
𝑥
≤ 10.15.6
applemac_os_x
10.14.6
applemac_os_x
10.14.6:security_update_2019-001
applemac_os_x
10.14.6:security_update_2019-002
applemac_os_x
10.14.6:security_update_2019-004
applemac_os_x
10.14.6:security_update_2019-005
applemac_os_x
10.14.6:security_update_2019-006
applemac_os_x
10.14.6:security_update_2019-007
applemac_os_x
10.14.6:security_update_2020-001
applemac_os_x
10.14.6:security_update_2020-002
applemac_os_x
10.14.6:security_update_2020-003
applemac_os_x
10.14.6:security_update_2020-004
applemac_os_x
10.14.6:security_update_2020-005
applemac_os_x
10.14.6:security_update_2020-006
applemac_os_x
10.14.6:security_update_2020-007
applemac_os_x
10.14.6:security_update_2021-001
applemac_os_x
10.14.6:security_update_2021-002
applemac_os_x
10.14.6:security_update_2021-003
applemac_os_x
10.14.6:supplemental_update
applemac_os_x
10.14.6:supplemental_update_2
applemac_os_x
10.15.7
applemac_os_x
10.15.7:security_update_2020
applemac_os_x
10.15.7:security_update_2020-001
applemac_os_x
10.15.7:security_update_2020-005
applemac_os_x
10.15.7:security_update_2020-007
applemac_os_x
10.15.7:security_update_2021-001
applemac_os_x
10.15.7:security_update_2021-002
applemac_os_x
10.15.7:supplemental_update
applemacos
11.0 ≤
𝑥
< 11.4
appletvos
𝑥
< 14.6
applewatchos
𝑥
< 7.5
𝑥
= Vulnerable software versions