CVE-2021-1779 | Vulnetix

CVE-2021-1779 PUBLISHED

Reported by apple · Published April 2, 2021

A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
mac_os_x	apple	10.15.7, 10.14.6
macOS	Apple	11.2

Affected products

Vendor	Product	Versions
Apple	macOS	unspecified
Apple	macOS	*

Timeline

Feb 2, 2021 CVE Published
Apr 14, 2021 EPSS Score (30 in total, the first dated here)
Nov 21, 2024 CVE Updated
Jun 1, 2026 Security Advisory
Aug 27, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2021-1779
vulnetix vdb fixes CVE-2021-1779

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-1779/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

x_refsource_MISC

Look up in the Resolve Platform →