CVE-2021-30783

Vulnerability

CVE-2021-30783 is an access issue in macOS that allows a sandboxed process to bypass sandbox restrictions. The vulnerability exists in the core sandbox enforcement mechanism and affects macOS Big Sur before version 11.5, macOS Catalina before Security Update 2021-004, and macOS Mojave before Security Update 2021-005 [1][2][3]. The issue was addressed with improved access restrictions.

Exploitation

An attacker would need to have code execution within a sandboxed environment on an affected macOS version. By leveraging this access issue, the attacker could escape the sandbox without requiring additional privileges or user interaction beyond what is already available in the sandboxed process. The exact exploitation steps are not publicly disclosed by Apple [1][2][3].

Impact

Successful exploitation allows a sandboxed process to circumvent sandbox restrictions, potentially leading to unauthorized access to system resources, data, or other processes. This could result in information disclosure, escalation of privileges, or further compromise of the system [1][2][3].

Mitigation

The vulnerability is fixed in macOS Big Sur 11.5, Security Update 2021-004 for Catalina, and Security Update 2021-005 for Mojave, all released on July 21, 2021 [1][2][3]. No workarounds are provided by Apple; users should apply the appropriate update. The CVE is not listed in the Known Exploited Vulnerabilities (KEV) catalog.