CVE-2021-31010VulnerabilityPublished 08/25/2022Updated 10/24/2026
CVE-2021-31010: Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
Affects Apple iOS, macOS, watchOSSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 08/25/2022
- KEV deadline
- 09/15/2022
- EPSS
- 3.7% chance of exploitation in 30 days – higher than 89% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
- support.apple.com/en-us/HT212804 (opens in a new tab)
- support.apple.com/en-us/HT212805 (opens in a new tab)
- support.apple.com/en-us/HT212806 (opens in a new tab)
- support.apple.com/en-us/HT212807 (opens in a new tab)
- support.apple.com/en-us/HT212824 (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2021-31010 (opens in a new tab)
Description
In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.
Weaknesses
References
- support.apple.com/en-us/HT212804, (opens in a new tab)
- support.apple.com/en-us/HT212805, (opens in a new tab)
- support.apple.com/en-us/HT212806, (opens in a new tab)
- support.apple.com/en-us/HT212807, (opens in a new tab)
- support.apple.com/en-us/HT212824 (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2021-31010 (opens in a new tab)
- cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2021-31010 (opens in a new tab)