« Volver al listado

CVE-2021-30931

Estado: ModificadaMedia (5.5)—

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. A malicious application may be able to disclose kernel memory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-30931",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "11.6",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "2021",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-08-24T19:15:20.433",
  "references": [
    {
      "url": "https://support.apple.com/en-us/HT212869",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://support.apple.com/en-us/HT212979",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://support.apple.com/en-us/HT212981",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://support.apple.com/en-us/HT212869",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.apple.com/en-us/HT212979",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.apple.com/en-us/HT212981",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. A malicious application may be able to disclose kernel memory."
    },
    {
      "lang": "es",
      "value": "Se abordó un problema lógico con una comprobación mejorada. Este problema es corregido en macOS Monterey versión 12.0.1, macOS Big Sur versión 11.6.2, Security Update 2021-008 Catalina. Una aplicación maliciosa puede revelar la memoria del kernel"
    }
  ],
  "lastModified": "2026-06-17T03:51:09.660",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "059EC990-44D3-4DEC-9933-90A0706FEF22",
              "versionEndIncluding": "10.15.7",
              "versionStartIncluding": "10.15"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F12CC8B5-C1EB-419E-8496-B9A3864656AD"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FD7176C-F4D1-43A7-9E49-BA92CA0D9980"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2703DE0B-8A9E-4A9D-9AE8-028E22BF47CA"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F441A43-1669-478D-9EC8-E96882DE4F9F"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D425C653-37A2-448C-BF2F-B684ADB08A26"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A54D63B7-B92B-47C3-B1C5-9892E5873A98"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "012052B5-9AA7-4FD3-9C80-5F615330039D"
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50F21A3C-0AC3-48C5-A4F8-5A7B478875B4"
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1780ED5-F2E0-4937-A51A-FAC02EB17464",
              "versionEndExcluding": "11.6.2",
              "versionStartExcluding": "11.0"
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27161B2A-1A1D-4921-95D9-9E84CDB386AF",
              "versionEndExcluding": "12.1",
              "versionStartExcluding": "12.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}