The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-003 Mojave It is, therefore, affected by multiple vulnerabilities, including the following:

  - An application may be able to execute arbitrary code with system privileges due to insufficient permission     checks (CVE-2020-3838).

  - A memory corruption vulnerability could allow an application read access to restricted memory (CVE-2021-1808).

  - A memory corruption vulnerability could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.7 Security Update 2021-002 Catalina It is, therefore, affected by multiple vulnerabilities, including the following:

  - An application may be able to execute arbitrary code with system privileges due to insufficient permission     checks (CVE-2020-3838).

  - A memory corruption vulnerability could allow an application read access to restricted memory (CVE-2021-1808).

  - A memory corruption vulnerability could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-001 Mojave, 10.15.x prior to 10.15.7 Security Update 2021-001 Catalina, or 11.x prior to 11.2. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A logic issue existed resulting in memory corruption. This was addressed with improved state management.
    An application may be able to execute arbitrary code with kernel privileges. (CVE-2020-27904)

  - A logic issue existed that allowed applications to execute arbitrary code with kernel privileges.
    (CVE-2021-1750)

  - An out-of-bounds-write caused by improper input validation allowed maliciously crafted USD files to     unexpectedly terminate an application or cause arbitrary code execution. (CVE-2021-1762)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 14.4. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
149043	macOS 10.14.x < 10.14.6 Security Update 2021-003 Mojave (HT212327)	Nessus	MacOS X Local Security Checks	critical
149042	macOS 10.15.x < 10.15.7 Security Update 2021-002 Catalina (HT212326)	Nessus	MacOS X Local Security Checks	critical
146086	macOS 10.14.x < 10.14.6 Security Update 2021-001 / 10.15.x < 10.15.7 Security Update 2021-001 / macOS 11.x < 11.2 (HT212147)	Nessus	MacOS X Local Security Checks	critical
145548	Apple iOS < 14.4 Multiple Vulnerabilities (HT212146)	Nessus	Mobile Devices	critical

Detections

Analytics

CVE-2021-1797

medium

Tenable Plugins

critical

critical

critical

critical