A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT212804 | Vendor Advisory |
https://support.apple.com/en-us/HT212805 | Vendor Advisory |
https://support.apple.com/en-us/HT212806 | Vendor Advisory |
https://support.apple.com/en-us/HT212807 | Vendor Advisory |
https://support.apple.com/en-us/HT212824 | Vendor Advisory |
https://support.apple.com/en-us/HT212804 | Vendor Advisory |
https://support.apple.com/en-us/HT212805 | Vendor Advisory |
https://support.apple.com/en-us/HT212806 | Vendor Advisory |
https://support.apple.com/en-us/HT212807 | Vendor Advisory |
https://support.apple.com/en-us/HT212824 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:05
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.apple.com/en-us/HT212804 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212805 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212806 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212807 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212824 - Vendor Advisory |
28 Jun 2024, 14:07
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.apple.com/en-us/HT212804 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212805 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212806 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212807 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT212824 - Vendor Advisory |
07 Nov 2023, 03:34
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.apple.com/en-us/HT212806 - | |
References | () https://support.apple.com/en-us/HT212804 - | |
References | () https://support.apple.com/en-us/HT212807 - | |
References | () https://support.apple.com/en-us/HT212824 - | |
References | () https://support.apple.com/en-us/HT212805 - |
Information
Published : 2021-08-24 19:15
Updated : 2024-11-21 06:05
NVD link : CVE-2021-31010
Mitre link : CVE-2021-31010
CVE.ORG link : CVE-2021-31010
JSON object : View
Products Affected
apple
- macos
- mac_os_x
- ipados
- iphone_os
- watchos
CWE
CWE-502
Deserialization of Untrusted Data