CVE-2021-30770 Vulnerability Details

  /     /     /  

CVE-2021-30770 Metadata Quick Info

CVE Published: 08/09/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: apple | Vendor: Apple | Product: iOS
Status : PUBLISHED

---

CVE-2021-30770 Description

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations
Source: Apple

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).