A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.4 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

 - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30712)

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30678)

  - An application may be able to execute arbitrary code with kernel privileges. (CVE-2021-30704)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.7 Security Update 2021-003 Catalina. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30712)

  - A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30678)

  - An application may be able to execute arbitrary code with kernel privileges. (CVE-2021-30704)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Severity
149986	macOS 11.x < 11.4 (HT212529)	Nessus	MacOS X Local Security Checks	critical
149984	macOS 10.15.x < 10.15.7 Security Update 2021-002 Catalina (HT212530)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2021-30671

low

Tenable Plugins

critical

critical