Apple · macOS
CVE-2021-30713
Apple macOS Unspecified Vulnerability
What it is
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..
CISA: Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: November 17, 2021
More exploited flaws from Apple
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 18, 2026 | Improper Authentication | macOS | Critical 9.8 | 1.7% |
| Apr 17, 2023 | Use-After-Free | macOS | High 7.8 | 0.7% |
| Apr 4, 2022 | Out-of-Bounds Read | macOS | Medium 5.5 | 1.1% |
| Apr 4, 2022 | Out-of-Bounds Write | macOS | High 7.8 | 12% |
| Nov 3, 2021 | Unspecified | macOS | Medium 5.5 | 69% |
| Sep 29, 2026 | Out-of-Bounds Write | Multiple Products | High 8.8 | 26% |
| Mar 20, 2026 | Buffer Overflow | Multiple Products | High 8.8 | 1.7% |
| Mar 20, 2026 | Improper Locking | Multiple Products | High 7.8 | 0.4% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.