EXPOSURES › CVE-2021-31010

CVE-2021-31010

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-08-25 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-31010 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 rceexploited-in-wildunpatched

Apple iOS, macOS, watchOS sandbox bypassed

Apple's iOS, macOS, and watchOS had a critical vulnerability allowing sandboxed processes to bypass security restrictions, potentially enabling unauthorized access and data breaches.

Shame score — Critical vulnerability actively exploited with potential for unauthorized access and data breaches.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apple · vendor iOS, macOS, watchOS · product

DESCRIPTION

In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.