high8.8
CVE-2021-30677
This issue was addressed with improved environment sanitization.
Impact
This issue was addressed with improved environment sanitization. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to break out of its sandbox.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 14.6 |
| Apple | Iphone Os | before 14.6 |
| Apple | Mac Os X | from 10.14 through 10.14.5 from 10.15 through 10.15.6 Versions 10.14.6, 10.15.7 |
| Apple | Macos | from 11.0 before 11.4 |
| Apple | Tvos | before 14.6 |
| Apple | Watchos | before 7.5 |
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/HT212528
- https://support.apple.com/en-us/HT212529
- https://support.apple.com/en-us/HT212532
- https://support.apple.com/en-us/HT212533
- https://support.apple.com/en-us/HT212600
- https://support.apple.com/en-us/HT212603
- https://support.apple.com/kb/HT212602
- https://support.apple.com/en-us/HT212528
- https://support.apple.com/en-us/HT212529
- https://support.apple.com/en-us/HT212532
- https://support.apple.com/en-us/HT212533
- https://support.apple.com/en-us/HT212600
- https://support.apple.com/en-us/HT212603
- https://support.apple.com/kb/HT212602