medium6.5
CVE-2021-1873
An API issue in Accessibility TCC permissions was addressed with improved state management.
Impact
An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | from 10.14 through 10.14.5 from 10.15 through 10.15.5 Versions 10.14.6, 10.15.6, 10.15.7 |
| Apple | Macos | from 11.0 before 11.3 |