Security features bypass in macOS - CVE-2021-30668
Published: May 24, 2021
Vulnerability identifier: #VU53493
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-30668
CWE-ID: CWE-254
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to bypass the Login Window.
The vulnerability exists in the Software Update component. An attacker with physical access to the system can bypass the Login Windows during software update and gain unauthorized access to the system.
Affected software
macOS
How to mitigate CVE-2021-30668
Install updates from vendor's website.
macOS - update to 11.4 20F71