Published: 24/08/2021 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. An application may be able to access restricted files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x
apple mac os x 10.15.7
apple ipados
apple iphone os
apple macos
apple watchos
apple tvos

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8  <!--X-He ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15 <!--X-Subject-Header-End-- ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2021-09-20-2 watchOS 8   From: product-security-noreply- ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15   From: product-securi ...

CWE-59 https://support.apple.com/en-us/HT212804 https://support.apple.com/en-us/HT212805 https://support.apple.com/en-us/HT212807 https://support.apple.com/kb/HT212815 https://support.apple.com/en-us/HT212814 https://support.apple.com/en-us/HT212819 https://nvd.nist.gov http://seclists.org/fulldisclosure/2021/Oct/62

CVE-2021-30855

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect