CVE-2021-30713

Timeline

Detection, updates, and resolution for this record.

1. Sep 8, 2021 · Catalog

   Detected

   A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Nov 17, 2021 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..

Affected

• cpe apple/mac os xversion unspecified
• cpe apple/mac os x10.15.7
• vendor Apple macOSversion unspecified

Sources

• CISA KEVCVE-2021-30713

  Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.

  cisa.gov
• CVE.orgCVE-2021-30713

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2021-30713

  30-day exploitation probability 7.0%

  first.org
• NIST NVDCVE-2021-30713

  A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..

  nvd.nist.gov

References

• Mailing List · seclists.org
• CISA note · nvd.nist.gov
• Release Notes · support.apple.com
• Release Notes · support.apple.com
• Third Party Advisory · cisa.gov