Apple · macOS
CVE-2021-30657
Apple macOS Unspecified Vulnerability
What it is
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..
CISA: Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: November 17, 2021
More exploited flaws from Apple
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 18, 2026 | Improper Authentication | macOS | Critical 9.8 | 1.7% |
| Apr 17, 2023 | Use-After-Free | macOS | High 7.8 | 0.7% |
| Apr 4, 2022 | Out-of-Bounds Read | macOS | Medium 5.5 | 1.1% |
| Apr 4, 2022 | Out-of-Bounds Write | macOS | High 7.8 | 12% |
| Nov 3, 2021 | Unspecified | macOS | High 7.8 | 7.0% |
| Sep 29, 2026 | Out-of-Bounds Write | Multiple Products | High 8.8 | 26% |
| Mar 20, 2026 | Buffer Overflow | Multiple Products | High 8.8 | 1.7% |
| Mar 20, 2026 | Improper Locking | Multiple Products | High 7.8 | 0.4% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.