A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. A remote attacker may be able to cause a denial of service.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-004 Mojave. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30712)

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30678)

  - An application may be able to execute arbitrary code with kernel privileges. (CVE-2021-30704)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.7 Security Update 2021-003 Catalina. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30712)

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30678)

  - An application may be able to execute arbitrary code with kernel privileges. (CVE-2021-30704)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 14.5. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.3 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A memory corruption issue which could allow an application restricted memory read access (CVE-2021-1808).

  - A memory corruption issue which could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

  - An out-of-bounds wirte issue which could allow a malicious application to execute arbitrary code with     kernel privileges (CVE-2021-1834).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Severity
149985	macOS 10.14.x < 10.14.6 Security Update 2021-004 Mojave (HT212531)	Nessus	MacOS X Local Security Checks	critical
149984	macOS 10.15.x < 10.15.7 Security Update 2021-002 Catalina (HT212530)	Nessus	MacOS X Local Security Checks	critical
149061	Apple iOS < 14.5 Multiple Vulnerabilities (HT212317)	Nessus	Mobile Devices	critical
149041	macOS 11.x < 11.3 (HT212325)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2021-1884

medium

Tenable Plugins

critical

critical

critical

critical