Live › vulnerability › CVE-2021-1782
Go to dashboardA race condition in the Apple kernel on iOS, iPadOS, macOS, watchOS and tvOS lets a malicious app gain higher privileges on the device. Attackers have exploited it in the wild, and CISA lists it in its Known Exploited Vulnerabilities catalog.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple Multiple Products | vendor | – | – |
Check the OS version on each Apple device (Settings > General > About on iOS, About This Mac on macOS) and compare it with Apple's security notes for the fixed build.
Update each Apple device to a release that includes Apple's fix for CVE-2021-1782, as CISA directs.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..
This page as .md · .json · in your agent: get_signal("CVE-2021-1782")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.