CVE-2021-30975

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

VendorProductVersions
ApplemacOS>= unspecified, < 12.1
ApplemacOS>= unspecified, < 11.6
ApplemacOS>= unspecified, < 2021

References

Timeline

Published
Aug 24, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-309765.5A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, mCVE-2021-309777.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 CatalinaCVE-2021-309797.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, mCVE-2021-309807.8A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS MontereyCVE-2021-309817.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 CatalinaCVE-2021-309825.9A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS BCVE-2021-309837.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be CVE-2021-309847.5A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 anCVE-2021-309857.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious appliCVE-2021-309865.5A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passivCVE-2021-309875.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively trackCVE-2021-309885.5Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious applic
CVE-2021-30975: High severity, CVSS 8.6 | Vulnix