{"id":"CVE-2021-30657","kind":"vulnerability","aliases":["CVE-2021-30657"],"related":[],"title":"Apple macOS: Apple macOS Unspecified Vulnerability","description":"A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..","summary":"Apple macOS has a logic flaw in System Preferences that lets a malicious application bypass Gatekeeper checks. Attackers can run unsigned or untrusted software on a Mac that Gatekeeper would normally block.","severity":"high","cvss":5.5,"epss":0.68531,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Apple macOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","infrastructure","macos"],"not_affected_if":["fully-patched-macos"],"how_to_check":null,"fix":"Apply the macOS updates from Apple per CISA's required action; the sources do not name the exact fixed version.","status":"open","published_at":"2021-09-08T15:15:13+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:33:56+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:33:56Z","model":"claude-haiku-5-5","output":{"fix":"Apply the macOS updates from Apple per CISA's required action; the sources do not name the exact fixed version.","reach":"local","impact":"high","summary":"Apple macOS has a logic flaw in System Preferences that lets a malicious application bypass Gatekeeper checks. Attackers can run unsigned or untrusted software on a Mac that Gatekeeper would normally block.","category":"infrastructure","who_cares":["macos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Malicious app runs on the Mac despite Gatekeeper blocking it","analyst_note":"Find the fixed macOS build numbers and a detection method in Apple's security release notes for CVE-2021-30657 (support.apple.com security updates).","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["fully-patched-macos"],"user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000454,"input_tokens":2815,"output_tokens":344,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the fixed macOS build numbers and a detection method in Apple's security release notes for CVE-2021-30657 (support.apple.com security updates).","search":"'-002':74C '-2021':8A,11A '-30657':9A,12A '..':97C '11.3':70C '2021':73C 'activ':95C 'address':57C 'appl':1A,3A,16B,21B,83C 'apple':13A 'apple-devic':15B 'applic':34B,78C 'attack':38B 'awar':85C 'big':68C 'block':52B 'bypass':35B,80C 'catalina':75C 'check':37B,82C 'cve':7A,10A 'devic':17B 'exploit':18B,96C 'fix':65C 'flaw':26B 'gatekeep':36B,49B,81C 'improv':59C 'infrastructur':19B 'issu':55C,63C,91C 'let':31B 'logic':25B,54C 'mac':47B 'maco':2A,4A,20B,22B,67C 'macos':14A 'malici':33B,77C 'manag':61C 'may':79C,92C 'normal':51B 'prefer':29B 'report':88C 'run':40B 'secur':71C 'softwar':44B 'state':60C 'sur':69C 'system':28B 'unsign':41B 'unspecifi':5A 'untrust':43B 'updat':72C 'vulner':6A 'would':50B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-09-08T15:15:13+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-30657","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30657","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T17:39:58+00:00","note":null},{"source":"epss","external_id":"CVE-2021-30657","url":"https://api.first.org/data/v1/epss?cve=CVE-2021-30657","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-30657","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30657","severity":null,"published_at":"2021-09-08T15:15:13+00:00","modified_at":"2026-06-17T03:50:38+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}