High severity8.6NVD Advisory· Published Aug 24, 2021· Updated Jun 17, 2026

CVE-2021-30975

Description

This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./macOS Catalinallm-fuzzy
Range: before Security Update 2021-008
Apple Inc./macOS Big Surllm-fuzzy
Range: before 11.6.2
Apple Inc./macOS Montereyllm-fuzzy
Range: before 12.1
Apple Inc./macOSv5
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/en-us/HT212978nvd
support.apple.com/en-us/HT212979nvd
support.apple.com/en-us/HT212981nvd

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000