CVE-2021-1849
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences.
Credit
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2021-1849.
What is the title of this vulnerability?
The title of this vulnerability is 'AppleMobileFileIntegrity. An issue in code signature validation was addressed with improved checks.'
Which software versions are affected by this vulnerability?
The affected software versions are Apple iOS up to exclusive version 14.5, Apple iPadOS up to exclusive version 14.5, Apple watchOS up to exclusive version 7.4, Apple macOS Big Sur up to exclusive version 11.3, and Apple tvOS up to exclusive version 14.5.
How was this vulnerability addressed?
This vulnerability was addressed with improved checks in code signature validation.
Are there any references available for this vulnerability?
Yes, you can refer to the following Apple support articles for more information: https://support.apple.com/en-us/HT212317, https://support.apple.com/en-us/HT212324, and https://support.apple.com/en-us/HT212325