A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to gain root privileges.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to Mojave Security Update 2021-005 Mojave. It is, therefore, affected by multiple vulnerabilities including the following:

  - A double free issue could be exploited which could lead to arbitrary code execution with kernel   privileges. This issue was addressed with improved memory management. (CVE-2021-30703)

  - An issue could be exploited by tricking a user into opening a maliciously crafted file may lead to   unexpected application termination or arbitrary code execution. This issue was addressed by removing   the vulnerable code. (CVE-2021-30790)

  - An input validation issue could be exploited which could lead to arbitrary code execution with kernel   privileges. This issue was addressed with input validation. (CVE-2021-30805)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 0.0.x prior to Catalina Security Update 2021-004 Catalina. It is, therefore, affected by multiple vulnerabilities : Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Severity
152039	macOS 10.14.x < 10.14.6 Mojave Security Update 2021-005 (HT212603)	Nessus	MacOS X Local Security Checks	critical
152036	macOS 10.15.x < Catalina Security Update 2021-004 Catalina (HT212600)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2021-30672

high

Tenable Plugins

critical

critical