Live › vulnerability › CVE-2021-31010
Go to dashboardA sandbox escape in Apple iOS, macOS and watchOS lets a process confined by the sandbox break out of its restrictions. It is listed as actively exploited in the wild per CISA's KEV catalog.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple iOS, macOS, watchOS | vendor | – | – |
| apple ipados | vendor | < 14.8 | 14.8 |
| apple iphone os | vendor | >= 12.0, < 12.5.5 | 12.5.5 |
| apple iphone os | vendor | >= 14.0, < 14.8 | 14.8 |
| apple mac os x | vendor | >= 10.15, < 10.15.7 | 10.15.7 |
| apple mac os x | vendor | = 10.15.7 | – |
| apple macos | vendor | >= 11.0, < 11.6 | 11.6 |
| apple watchos | vendor | < 7.6.2 | 7.6.2 |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..
This page as .md · .json · in your agent: get_signal("CVE-2021-31010")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.