CVE-2021-30970

—

CVSS 3.1

5.5 medium

EPSS

15%p96

Published

Aug 24, 2021 (Aug 24, 2021)

Modified

Jun 17, 2026

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences.

Vendors: apple
Products: macos
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (14.7%)

In the news2 stories

Microsoft Details Critical Apple macOS Vulnerability Allowing SIP Protection Bypass

The Hacker NewsMay 31, 11:57 UTC · May 31, 2023Vulnerability CVE-2023-32369 CVE-2021-30892 CVE-2021-30970+2 CVEs

Microsoft Details macOS Bug That Could Let Attackers Gain Access to User Data

The Hacker NewsJan 11, 10:41 UTC · Jan 11, 2022Exploit / PoC CVE-2021-30970 CVE-2020-9934 CVE-2020-27937+1 CVEs