CVE-2021-30783: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process m...

Summary

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able to circumvent sandbox restrictions.

What to do

Update apple macos to version 11.5 or later.

Affected software

Vendor	Product	Affected versions
apple	mac_os_x	>= 10.14, <= 10.14.5 >= 10.15, <= 10.15.6 10.14.6 10.15.7 `cpe:2.3:o:apple:mac_os_x::::::::`
apple	macos	>= 11.0, < 11.5 `cpe:2.3:o:apple:macos::::::::`

Original advisory text

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process m...

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able to circumvent sandbox restrictions.

References

http://seclists.org/fulldisclosure/2021/Sep/40 Mailing List Third Party Advisory
https://support.apple.com/en-us/HT212600 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212602 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212603 Release Notes Vendor Advisory
https://support.apple.com/kb/HT212805 Vendor Advisory