Cyber Resilience

CVE-2021-1871

Apple Mac Os X 10.15 – 10.15.7

CISA KEVActive ExploitationEUVD Exploited
Published
02 April 2021
Modified
23 October 2025
KEV Added
03 November 2021
Patch / advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.071 94th percentile
Risk Priority 97 floored blend · peak EPSS

Summary

CVE-2021-1871 is a critical-severity an unspecified weakness vulnerability in Apple Mac Os X. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 6% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

A logic issue addressed with improved restrictions affects multiple Apple operating systems, including versions of macOS prior to Big Sur 11.2, Catalina and Mojave prior to Security Update 2021-001, and iOS and iPadOS prior to 14.4. The flaw received a CVSS score of 9.8, reflecting network-accessible attack conditions with no required authentication or user interaction.

A remote attacker can exploit the vulnerability to achieve arbitrary code execution on an affected device. The attack requires only network connectivity and can fully compromise confidentiality, integrity, and availability of the target system.

Apple security updates for the listed platforms remediate the issue, and the vendor has stated awareness of reports indicating active exploitation in the wild. Additional distribution-specific advisories reference the same underlying component updates.

EU & UK References

Vulnerability Data

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code…

more

execution. Apple is aware of a report that this issue may have been actively exploited..

CWE(s)
KEV Date Added
03 November 2021

Related Threats

CVEs Like This One

CVE-2021-30858Same product: Apple Ipadosboth on KEV
CVE-2023-42917Same product: Apple Ipadosboth on KEV
CVE-2023-42916Same product: Apple Ipadosboth on KEV
CVE-2021-1870Same product: Apple Ipadosboth on KEV
CVE-2022-32893Same product: Apple Ipadosboth on KEV
CVE-2024-44309Same product: Apple Ipadosboth on KEV
CVE-2024-44308Same product: Apple Ipadosboth on KEV
CVE-2023-41983Same product: Apple Ipados
CVE-2025-24201Same product: Apple Ipadosboth on KEV
CVE-2021-1789Same product: Apple Ipadosboth on KEV

Affected Assets

apple
ipados
≤ 14.4
apple
iphone os
≤ 14.4
apple
mac os x
10.15.7 · 10.15 — 10.15.7
apple
macos
11.0.1 — 11.2
debian
debian linux
10.0
fedoraproject
fedora
33

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References