Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Sep 15, 2022

CVE-2021-31010

High
EPSS 1.0%CISA KEV
Apple/iOS, macOS, watchOS

Description

In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.

EPSS — Exploit Probability

1.0%

Higher than 76.5% of all CVEs

Required Action

https://support.apple.com/en-us/HT212804, https://support.apple.com/en-us/HT212805, https://support.apple.com/en-us/HT212806, https://support.apple.com/en-us/HT212807, https://support.apple.com/en-us/HT212824; https://nvd.nist.gov/vuln/detail/CVE-2021-31010

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
1.0%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Aug 25, 2022

Added to KEV

Aug 25, 2022

Remediation Due

Sep 15, 2022

Affected Product

Apple

iOS, macOS, watchOS

View all Apple CVEs