CVE-2021-30892

—

CVSS 3.1

5.5 medium

EPSS

10%p95

Published

Aug 24, 2021 (Aug 24, 2021)

Modified

Jun 17, 2026

Description

An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to modify protected parts of the file system.

Vendors: apple
Products: mac os x, macos
Weakness: CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (10.4%)

In the news11 stories

New

Infosecurity MagazineMay 31, 17:30 UTC · May 31, 2023Exploit / PoC in the wildCVE-2021-30892 CVE-2023-32369

60

Microsoft Details Critical Apple macOS Vulnerability Allowing SIP Protection Bypass

The Hacker NewsMay 31, 11:57 UTC · May 31, 2023Vulnerability CVE-2023-32369 CVE-2021-30892 CVE-2021-30970+2 CVEs

60

Apple fixed macOS flaw that could allow to bypass Gatekeeper feature

Security AffairsDec 26, 13:30 UTC · Dec 26, 2021Exploit / PoC CVE-2021-30853 CVE-2021-30657 CVE-2021-30892

60

Expert Details macOS Bug That Could Let Malware Bypass Gatekeeper Security

The Hacker NewsDec 24, 13:07 UTC · Dec 24, 2021Malware in the wildCVE-2021-30853 CVE-2021-30657 CVE-2021-30892

60

Week in review: Popular npm package hijacked, zero trust security key tenets, wildcard certificate risks

Help Net SecurityOct 31, 00:00 UTC · Oct 31, 2021Ransomware in the wildCVE-2021-30892 CVE-2021-30883

60

Apple fixes security feature bypass in macOS (CVE-2021-30892)

Help Net SecurityOct 29, 00:00 UTC · Oct 29, 2021Vulnerability in the wildCVE-2021-30892 CVE-2021-30883

60

Microsoft found a new bug that allows bypassing SIP root restrictions in macOS

Security AffairsMay 31, 07:57 UTC · May 31, 2023Exploit / PoC CVE-2023-32369 CVE-2021-30892

50

Microsoft found Shrootless bug in macOS that could bypass SIP feature

Security AffairsOct 28, 22:44 UTC · Oct 28, 2021Exploit / PoC CVE-2021-30892

50

Microsoft Uncovers macOS Vulnerability CVE-2024

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2025Vulnerability CVE-2024-44243 CVE-2021-30892 CVE-2023-32369+1 CVEs

35

Microsoft finds Shrootless, a macOS bug that lets malware install rootkits

The RecordDec 18, 00:00 UTC · Dec 18, 2022Malware CVE-2021-30892

35

New 'Shrootless' Bug Could Let Attackers Install Rootkit on macOS Systems

The Hacker NewsOct 30, 13:07 UTC · Oct 30, 2021Malware CVE-2021-30892

35