vulnerability

OS X update for Preferences (CVE-2021-1740)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
2	(AV:L/AC:L/Au:N/C:N/I:P/A:N)	Aug 23, 2021	Aug 23, 2021	Aug 13, 2025

Severity

CVSS

(AV:L/AC:L/Au:N/C:N/I:P/A:N)

Published

Aug 23, 2021

Added

Aug 23, 2021

Modified

Aug 13, 2025

Description

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.

Solutions

apple-osx-security-update-2021-002-catalinaapple-osx-upgrade-11_3

References

CVE-2021-1740
https://attackerkb.com/topics/CVE-2021-1740
CWE-22
URL-https://support.apple.com/kb/HT212325
URL-https://support.apple.com/kb/HT212326
URL-https://support.apple.com/kb/HT212327

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today