CVE-2021-1739 — Vulnetix

CVE-2021-1739 PUBLISHED CVSS 5.5 MEDIUM

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.

EPSS 0.07% · 20.7th percentile

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

0.07%

20.7th percentile

Affected Products

Vendor	Product	Versions
apple	iphone_os	0
Apple	tvOS	*
Apple	macOS	unspecified, unspecified, unspecified
apple	macos	11.0
Apple	iOS and iPadOS	unspecified
Apple	watchOS	*
apple	ipados	0
apple	watchos	0
apple	mac_os_x	10.14.6, 10.14.6, 10.14.6
apple	tvos	0

Timeline

Apr 27, 2021 CVE Published
Sep 9, 2021 EPSS Score
Sep 16, 2021 EPSS Score
Nov 6, 2021 EPSS Score
Jan 2, 2022 EPSS Score
Mar 1, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Jun 24, 2022 EPSS Score
Aug 22, 2022 EPSS Score
Oct 19, 2022 EPSS Score
Dec 16, 2022 EPSS Score

References

https://support.apple.com/fr-fr/HT212325 advisory
https://support.apple.com/fr-fr/HT212327 advisory
https://support.apple.com/fr-fr/HT212317 advisory
https://support.apple.com/fr-fr/HT212318 advisory
https://support.apple.com/fr-fr/HT212324 advisory
https://support.apple.com/fr-fr/HT212326 advisory
https://support.apple.com/fr-fr/HT212319 advisory
https://support.apple.com/fr-fr/HT212323 advisory
https://support.apple.com/fr-fr/HT212320 advisory
https://support.apple.com/fr-fr/HT212321 advisory
https://support.apple.com/en-us/HT212317 url
https://support.apple.com/en-us/HT212323 url
https://support.apple.com/en-us/HT212324 url
https://support.apple.com/en-us/HT212325 url
https://support.apple.com/en-us/HT212326 url
https://support.apple.com/en-us/HT212327 url
https://nvd.nist.gov/vuln/detail/CVE-2021-1739 advisory

Open in Interactive Console →