NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 1 read

CVE-2021-30892

CVSS 3.1: 5.5 medium
EPSS: 10%p95
Published: Aug 24, 2021 · Aug 24, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-30892 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to modify protected parts of the file system.

Vendors: apple

Products: mac os x, macos

Weakness: CWE-732

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (10.4%)

In the news

11 stories

New

Infosecurity MagazineMay 31, 17:30 UTC · May 31, 2023Exploit / PoCExploitedCVE-2021-30892 CVE-2023-323692 · 1 read

60

Microsoft Details Critical Apple macOS Vulnerability Allowing SIP Protection Bypass

The Hacker NewsMay 31, 11:57 UTC · May 31, 2023VulnerabilityCVE-2023-32369 CVE-2021-30892 CVE-2021-30970+22 · 1 read

60

Apple fixed macOS flaw that could allow to bypass Gatekeeper feature

Security AffairsDec 26, 13:30 UTC · Dec 26, 2021Exploit / PoCCVE-2021-30853 CVE-2021-30657 CVE-2021-308922 · 1 read

60

Expert Details macOS Bug That Could Let Malware Bypass Gatekeeper Security

The Hacker NewsDec 24, 13:07 UTC · Dec 24, 2021MalwareExploitedCVE-2021-30853 CVE-2021-30657 CVE-2021-308922

60

Week in review: Popular npm package hijacked, zero trust security key tenets, wildcard certificate risks

Help Net SecurityOct 31, 00:00 UTC · Oct 31, 2021RansomwareExploitedCVE-2021-30892 CVE-2021-308832 · 1 read

60

Apple fixes security feature bypass in macOS (CVE-2021-30892)

Help Net SecurityOct 29, 00:00 UTC · Oct 29, 2021VulnerabilityExploitedCVE-2021-30892 CVE-2021-308832 · 1 read

60

Microsoft found a new bug that allows bypassing SIP root restrictions in macOS

Security AffairsMay 31, 07:57 UTC · May 31, 2023Exploit / PoCCVE-2023-32369 CVE-2021-308923 · 1 read

50

Microsoft found Shrootless bug in macOS that could bypass SIP feature

Security AffairsOct 28, 22:44 UTC · Oct 28, 2021Exploit / PoCCVE-2021-308922

50

Microsoft Uncovers macOS Vulnerability CVE-2024

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2025VulnerabilityCVE-2024-44243 CVE-2021-30892 CVE-2023-32369+12 · 1 read

35

Microsoft finds Shrootless, a macOS bug that lets malware install rootkits

The RecordDec 18, 00:00 UTC · Dec 18, 2022MalwareCVE-2021-308923 · 1 read

35

New 'Shrootless' Bug Could Let Attackers Install Rootkit on macOS Systems

The Hacker NewsOct 30, 13:07 UTC · Oct 30, 2021MalwareCVE-2021-308922 · 1 read

35