CVE-2021-31010

Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

iPadOS

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..

24. Aug 2021

Ausgewertete Quellen

• Apple
  https://support.apple.com/en-us/HT212804
• Apple
  https://support.apple.com/en-us/HT212805
• Apple
  https://support.apple.com/en-us/HT212806
• Apple
  https://support.apple.com/en-us/HT212807
• Apple
  https://support.apple.com/en-us/HT212824
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31010
• CISA
  Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
• NVD
  CVE-2021-31010