CVE-2021-1849

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences.

Score

CVSS 3.1 7.5 High

Status

Modified - product-security@apple.com

Published

2021-09-08

Last modified

2024-08-03

Weaknesses

CWE-347

Affected products

• Ios And Ipados (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Macos (Apple)
• Tvos (Apple)
• Watchos (Apple)

References

• https://support.apple.com/en-us/HT212317
• https://support.apple.com/en-us/HT212323
• https://support.apple.com/en-us/HT212324
• https://support.apple.com/en-us/HT212325