CVE-2021-1870
Apple Mac Os X 10.15 – 10.15.7
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSummary
CVE-2021-1870 is a critical-severity an unspecified weakness vulnerability in Apple Mac Os X. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 6% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
A logic issue addressed with improved restrictions affects multiple Apple operating systems including macOS Big Sur prior to 11.2, macOS Catalina prior to Security Update 2021-001, macOS Mojave prior to Security Update 2021-001, and iOS/iPadOS prior to 14.4. The flaw carries a CVSS score of 9.8 and permits remote code execution without requiring authentication or user interaction.
A remote attacker can exploit the vulnerability over the network to achieve arbitrary code execution with full confidentiality, integrity, and availability impact on the target device. The attack vector requires no privileges or user interface interaction, making it suitable for unauthenticated remote exploitation.
Apple security updates for the listed macOS, iOS, and iPadOS versions resolve the issue. The vendor notes awareness of reports indicating the vulnerability may have been actively exploited in the wild.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-7334
Vulnerability Data
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code…
more
execution. Apple is aware of a report that this issue may have been actively exploited..
- CWE(s)
- KEV Date Added
- 03 November 2021
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.