CVE-2021-1851

Katalog CVE

CVSS 8.8 · High EPSS 2,2%

Kerentanan Improper Privilege Management pada apple ipados, apple iphone os +4 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.

Rincian

Terbit di NVD

8 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 82,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT212317 advisory vendor
• https://support.apple.com/en-us/HT212323 advisory vendor
• https://support.apple.com/en-us/HT212324 advisory vendor
• https://support.apple.com/en-us/HT212325 advisory vendor
• https://support.apple.com/en-us/HT212326 advisory vendor
• https://support.apple.com/en-us/HT212327 advisory vendor