2 lines
5.8 KiB
JSON
2 lines
5.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"11.2","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"6DE2B03F-94EE-4E32-B366-FE31A7031403","versionEndExcluding":"10.14.6","versionStartIncluding":"10.14","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"DB8A73F8-3074-4B32-B9F6-343B6B1988C5","versionEndExcluding":"10.15.7","versionStartIncluding":"10.15","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*","matchCriteriaId":"693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*","matchCriteriaId":"CFE26ECC-A2C2-4501-9950-510DE0E1BD86","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*","matchCriteriaId":"26108BEF-0847-4AB0-BD98-35344DFA7835","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*","matchCriteriaId":"0FD3467D-7679-479F-9C0B-A93F7CD0929D","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*","matchCriteriaId":"D4C6098E-EDBD-4A85-8282-B2E9D9333872","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*","matchCriteriaId":"518BB47B-DD76-4E8C-9F10-7EBC1E146191","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*","matchCriteriaId":"63940A55-D851-46EB-9668-D82BEFC1FE95","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*","matchCriteriaId":"68C7A97A-3801-44FA-96CA-10298FA39883","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*","matchCriteriaId":"6D69914D-46C7-4A0E-A075-C863C1692D33","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*","matchCriteriaId":"9CDB4476-B521-43E4-A129-8718A8E0A8CD","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*","matchCriteriaId":"9D072B77-BE3F-4A2E-B66A-E2C8DC3781E4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*","matchCriteriaId":"A4A6BF78-B772-435C-AC1A-2199027CCF9E","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*","matchCriteriaId":"A654B8A2-FC30-4171-B0BB-366CD7ED4B6A","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*","matchCriteriaId":"F1F4BF7F-90D4-4668-B4E6-B06F4070F448","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*","matchCriteriaId":"C1C795B9-E58D-467C-83A8-2D45C792292F","vulnerable":true},{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"52B62D32-7B84-48DB-8E87-FB5C61958CC0","versionEndExcluding":"11.2.1","versionStartIncluding":"11.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges."},{"lang":"es","value":"Se abordó una condición de carrera con una comprobación adicional. Este problema es corregido en macOS Big Sur versión 11.2.1, Supplemental Update de macOS Catalina versión 10.15.7, Security Update de macOS Mojave versión 10.14.6 2021-002. Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios de kernel."}],"id":"CVE-2021-1806","lastModified":"2026-06-17T03:32:35.643","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"HIGH","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.6,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":4.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-04-02T19:15:20.227","references":[{"source":"product-security@apple.com","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Apr/54"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212177"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/kb/HT212327"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://seclists.org/fulldisclosure/2021/Apr/54"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212177"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/kb/HT212327"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"nvd@nist.gov","type":"Primary"}]}
|