Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2021-31010: Apple iOS, macOS, watchOS allows sandbox escape
CVE-2021-31010 · published 5 years ago · actively exploited
Summary
Certain versions of iOS, iPadOS, macOS and watchOS let a restricted app break out of its safety container, gaining access to parts of the system it should not see. This can let attackers run code or view data beyond the app's limits. Update the operating system to the latest version provided by Apple to restore proper sandbox protection.
What to do
- Update apple ipados to version 14.8 or later.
- Update apple mac_os_x to version 10.15.7 or later.
- Update apple macos to version 11.6 or later.
- Update apple watchos to version 7.6.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ios, macos, watchos | All versions |
| apple | ipados |
< 14.8 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
>= 12.0, < 12.5.5 >= 14.0, < 14.8 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | mac_os_x |
>= 10.15, < 10.15.7 10.15.7 cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| apple | macos |
>= 11.0, < 11.6 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 7.6.2 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.
References
- https://support.apple.com/en-us/HT212804 Vendor Advisory
- https://support.apple.com/en-us/HT212805 Vendor Advisory
- https://support.apple.com/en-us/HT212806 Vendor Advisory
- https://support.apple.com/en-us/HT212807 Vendor Advisory
- https://support.apple.com/en-us/HT212824 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-... US Government Resource
Internet-facing
3 days
Internal
14 days
- Known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
7.5
High
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
4%
chance of attack within 30 days
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published24 Aug 2021
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta