CVE-2021-30657

Timeline

Detection, updates, and resolution for this record.

1. Sep 8, 2021 · Catalog

   Detected

   A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Nov 17, 2021 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

Affected

• cpe apple/mac os xversion unspecified
• cpe apple/mac os x10.15.6
• cpe apple/mac os x10.15.7
• vendor Apple macOSversion unspecified

Sources

• CISA KEVCVE-2021-30657

  Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.

  cisa.gov
• CVE.orgCVE-2021-30657

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2021-30657

  30-day exploitation probability 68.5%

  first.org
• Metasploit Modulesexploit_osx/browser/osx_gatekeeper_bypass

  Public module reference (manual). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDCVE-2021-30657

  A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Release Notes · support.apple.com
• Release Notes · support.apple.com
• Third Party Advisory · cisa.gov