CVE-2021-30688
Published May 24, 2021
·Updated
A malicious application may be able to break out of its sandbox. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A path handling issue was addressed with improved validation.
Credit
Thijs Alkemade(Computest Research Division)
Affected Software
12 affected componentsFixes available
Apple macOS Big Sur<11.4
11.4
Apple Catalina
Apple iOS and macOS>=10.15<=10.15.6
Apple iOS and macOS=10.15.7
Apple iOS and macOS=10.15.7-security_update_2020
Apple iOS and macOS=10.15.7-security_update_2020-001
Apple iOS and macOS=10.15.7-security_update_2020-005
Apple iOS and macOS=10.15.7-security_update_2020-007
Apple iOS and macOS=10.15.7-security_update_2021-001
Apple iOS and macOS=10.15.7-security_update_2021-002
Apple iOS and macOS=10.15.7-supplemental_update
Apple macOS>=11.0<11.4
Event History
Sep 8, 2021
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-30688?
CVE-2021-30688 is a vulnerability in the App Store that allows a malicious application to break out of its sandbox.
2
What is the severity of CVE-2021-30688?
The severity of CVE-2021-30688 is not specified.
3
How does CVE-2021-30688 affect macOS Big Sur?
CVE-2021-30688 affects macOS Big Sur version up to but excluding 11.4.
4
How does CVE-2021-30688 affect Apple Catalina?
The impact of CVE-2021-30688 on Apple Catalina is not mentioned.
5
How can I fix CVE-2021-30688?
To fix CVE-2021-30688, update your macOS Big Sur to version 11.4 or later.