CVE-2021-31010: Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
Published Aug 24, 2021
·Updated
Core Telephony. A deserialization issue was addressed through improved validation.
Credit
Citizen Lab, Google Project Zero, Citizen Lab, Google Project Zero, Citizen Lab, Google Project Zero, Citizen Lab, Google Project Zero, Citizen Lab, Google Project Zero
Affected Software
29 affected componentsFixes available
Apple macOS Big Sur<11.6
11.6
Apple Catalina
Apple WatchOS<7.6.2
7.6.2
Apple iOS, macOS, watchOS
Apple iOS<12.5.5
12.5.5
Apple iOS<14.8
14.8
Apple iPadOS<14.8
14.8
Apple iPadOS<14.8
Apple iPhone OS>=12.0<12.5.5
Apple iPhone OS>=14.0<14.8
Apple iOS and macOS>=10.15<10.15.7
Apple iOS and macOS=10.15.7
Apple iOS and macOS=10.15.7-security_update_2020
Apple iOS and macOS=10.15.7-security_update_2020-001
Apple iOS and macOS=10.15.7-security_update_2020-005
Apple iOS and macOS=10.15.7-security_update_2020-007
Apple iOS and macOS=10.15.7-security_update_2021-001
Apple iOS and macOS=10.15.7-security_update_2021-002
Apple iOS and macOS=10.15.7-security_update_2021-003
Apple iOS and macOS=10.15.7-security_update_2021-006
Apple iOS and macOS=10.15.7-security_update_2021-007
Apple iOS and macOS=10.15.7-security_update_2021-008
Apple iOS and macOS=10.15.7-security_update_2022-001
Apple iOS and macOS=10.15.7-security_update_2022-002
Apple iOS and macOS=10.15.7-security_update_2022-003
Apple iOS and macOS=10.15.7-security_update_2022-004
Apple iOS and macOS=10.15.7-supplemental_update
Apple macOS>=11.0<11.6
Apple WatchOS<7.6.2
Event History
Aug 24, 2021
CVE Published
via MITRE·06:51 PM
Data Sourced
via MITRE·06:51 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Aug 25, 2022
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is CVE-2021-31010?
CVE-2021-31010 is a vulnerability in Apple iOS, macOS, and watchOS that allows a sandboxed process to bypass sandbox restrictions.
2
How does CVE-2021-31010 affect Apple devices?
CVE-2021-31010 affects Apple devices running iOS, macOS, and watchOS.
3
What is the severity of CVE-2021-31010?
The severity of CVE-2021-31010 is not specified in the provided information.
4
How can I fix CVE-2021-31010?
To fix CVE-2021-31010, update your Apple devices to the recommended versions: iOS 12.5.5, macOS Big Sur 11.6, or watchOS 7.6.2.
5
Where can I find more information about CVE-2021-31010?
You can find more information about CVE-2021-31010 on the official Apple support page: [CVE-2021-31010](https://support.apple.com/en-us/HT212804)