CVE-2021-31010

Summary

CVE	CVE-2021-31010
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-08-24 19:15:00 UTC
Updated	2023-11-07 03:34:00 UTC
Description	A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..

EPSS: 0.036730000 probability, percentile 0.884940000 (date 2026-07-22)

CISA KEV: Listed on 2022-08-25; due 2022-09-15; ransomware use Unknown

Problem Types: CWE-502

Vendor	Apple
Product	iOS, macOS, watchOS
Name	Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
Required Action	Apply updates per vendor instructions.
Notes	https://support.apple.com/en-us/HT212804, https://support.apple.com/en-us/HT212805, https://support.apple.com/en-us/HT212806, https://support.apple.com/en-us/HT212807, https://support.apple.com/en-us/HT212824; https://nvd.nist.gov/vuln/detail/CVE-2021-31010

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Apple	Ipados	All	All	All	All
Operating System	Apple	Ipad Os	All	All	All	All
Operating System	Apple	Iphone Os	All	All	All	All
Operating System	Apple	Macos	All	All	All	All
Operating System	Apple	Mac Os X	All	All	All	All
Operating System	Apple	Mac Os X	10.15.7	-	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2020	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2020-001	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2020-005	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2020-007	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2021-001	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2021-002	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2021-003	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2021-006	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2021-007	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2021-008	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2022-001	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2022-002	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2022-003	All	All
Operating System	Apple	Mac Os X	10.15.7	security_update_2022-004	All	All
Operating System	Apple	Mac Os X	10.15.7	supplemental_update	All	All
Operating System	Apple	Watchos	All	All	All	All

Reference	Source	Link	Tags
About the security content of iOS 12.5.5 - Apple Support	MISC	support.apple.com
About the security content of Security Update 2021-005 Catalina - Apple Support		support.apple.com
About the security content of macOS Big Sur 11.6 - Apple Support		support.apple.com
About the security content of iOS 14.8 and iPadOS 14.8 - Apple Support	MISC	support.apple.com
About the security content of watchOS 7.6.2 - Apple Support		support.apple.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis
CISA Known Exploited Vulnerabilities catalog	CISA	www.cisa.gov	kev

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.