« Volver al listado

CVE-2021-30933

Estado: ModificadaAlta (7)—

Se ha solucionado una condición de carrera con la mejora de la gestión de estados. Este problema se ha solucionado en macOS Monterey 12.0.1, macOS Big Sur 11.6. Una aplicación maliciosa puede ser capaz de ejecutar código arbitrario con privilegios del kernel

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apple — Macos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-30933",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "11.6",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "12.0",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-08-24T19:15:20.583",
  "references": [
    {
      "url": "https://support.apple.com/en-us/HT212804",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://support.apple.com/en-us/HT212869",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://support.apple.com/en-us/HT212804",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.apple.com/en-us/HT212869",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges."
    },
    {
      "lang": "es",
      "value": "Se ha solucionado una condición de carrera con la mejora de la gestión de estados. Este problema se ha solucionado en macOS Monterey 12.0.1, macOS Big Sur 11.6. Una aplicación maliciosa puede ser capaz de ejecutar código arbitrario con privilegios del kernel"
    }
  ],
  "lastModified": "2026-06-17T03:51:09.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C416CDE-C6B5-4F68-8095-A4657F64C370",
              "versionEndExcluding": "11.6",
              "versionStartIncluding": "11.0"
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:12.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "255504D8-BE6E-4378-AB81-C65970EB6408"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}