CVE-2021-31010 Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

KNOWN EXPLOITED VULNERABILITY

CISA KEV 处置信息

已确认在野利用

加入 KEV: 2022/08/25
整改期限: 2022/09/15已逾期 1496 天
CISA 厂商: Apple
CISA 产品: iOS, macOS, watchOS

要求采取的措施

Apply updates per vendor instructions.

CISA 说明

https://support.apple.com/en-us/HT212804, https://support.apple.com/en-us/HT212805, https://support.apple.com/en-us/HT212806, https://support.apple.com/en-us/HT212807, https://support.apple.com/en-us/HT212824; https://nvd.nist.gov/vuln/detail/CVE-2021-31010

漏洞描述

In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.

影响产品

暂无结构化产品信息。

修复建议