Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2021-30697: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big...
CVE-2021-30697 · published 5 years ago
Summary
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local user may be able to leak sensitive user information.
What to do
- Update apple ipados to version 14.6 or later.
- Update apple iphone_os to version 14.6 or later.
- Update apple macos to version 11.4 or later.
- Update apple tvos to version 14.6 or later.
- Update apple watchos to version 7.5 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 14.6 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 14.6 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | mac_os_x |
>= 10.14, <= 10.14.5 >= 10.15, <= 10.15.6 10.14.6 10.15.7 cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| apple | macos |
>= 11.0, < 11.4 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | tvos |
< 14.6 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 7.5 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big...
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local user may be able to leak sensitive user information.
References
- https://support.apple.com/en-us/HT212528 Vendor Advisory
- https://support.apple.com/en-us/HT212529 Vendor Advisory
- https://support.apple.com/en-us/HT212530 Vendor Advisory
- https://support.apple.com/en-us/HT212531 Vendor Advisory
- https://support.apple.com/en-us/HT212532 Vendor Advisory
- https://support.apple.com/en-us/HT212533 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published8 Sep 2021
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-30697 · NVD
Track software like this
Free during beta