Unrated severityNVD Advisory· Published Sep 8, 2021· Updated Aug 3, 2024

CVE-2021-30681

Description

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to gain root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./macOS Big Surllm-fuzzy
Range: <11.4
Apple Inc./Ipadosllm-fuzzy
Range: <14.6
Apple Inc./iOSllm-fuzzy
Range: <14.6
Apple Inc./macOSv5
Range: unspecified
Apple Inc./iOS and iPadOScpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/en-us/HT212528mitrex_refsource_MISC
support.apple.com/en-us/HT212529mitrex_refsource_MISC
support.apple.com/en-us/HT212530mitrex_refsource_MISC
support.apple.com/en-us/HT212531mitrex_refsource_MISC
support.apple.com/en-us/HT212533mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000