{"id":"CVE-2021-30724","published":"2021-09-08T13:41:23Z","modified":"2024-08-03T22:40:32Z","title":"This issue was addressed with improved checks","vendor":"Apple","product":"iOS and iPadOS","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[">= unspecified, < 14.6"]},{"vendor":"Apple","product":"macOS","versions":[">= unspecified, < 11.4"]},{"vendor":"Apple","product":"macOS","versions":[">= unspecified, < 2021"]},{"vendor":"Apple","product":"macOS","versions":[">= unspecified, < 2021"]},{"vendor":"Apple","product":"macOS","versions":[">= unspecified, < 14.6"]},{"vendor":"Apple","product":"macOS","versions":[">= unspecified, < 7.5"]}],"description":{"text":"This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local attacker may be able to elevate their privileges.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.00809,"percentile":0.56789,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://support.apple.com/en-us/HT212528","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/en-us/HT212529","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/en-us/HT212532","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/en-us/HT212533","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/en-us/HT212530","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/en-us/HT212531","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[{"id":"SRC-e6bdfd4df4a0521b778c","title":"CVE-2021-30724: CVMServer Vulnerability in macOS and iOS","publisher":"trendmicro.com","url":"https://www.trendmicro.com/en_us/research/21/f/CVE-2021-30724_CVMServer_Vulnerability_in_macOS_and_iOS.html","date":"2021-06-03","mentions":[{"quote":"The vulnerability, labeled CVE-2021-30724, is triggered by an integer overflow leading to an out-of-bounds memory access, from which point privilege escalation can be attained.","start":94,"end":270},{"quote":"Apple has already made a fix for CVE-2021-30724.","start":5958,"end":6006},{"quote":"As an aside, we found that the binary CVMCompiler has the same issue, which has also been fixed using this method used for CVE-2021-30724.","start":6098,"end":6236},{"quote":"If CVE-2021-30724 is left unpatched, an attacker can elevate his privileges by exploiting the vulnerability.","start":6755,"end":6863}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-17641","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-17641","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-06-03","kind":"report","label":"Named in trendmicro.com: CVE-2021-30724: CVMServer Vulnerability in macOS and iOS","url":"https://www.trendmicro.com/en_us/research/21/f/CVE-2021-30724_CVMServer_Vulnerability_in_macOS_and_iOS.html","provenance":"machine"},{"date":"2021-09-08","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-30724","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":15.2,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":11.36,"detail":"percentile 0.5679"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}