{"id":"CVE-2021-1782","aliases":["EUVD-2021-7246","GHSA-22jf-974v-hf7j"],"status":"published","title":"A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2,...","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02222,"percentile":0.82837,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-269","CWE-362","CWE-667"],"published":"2021-04-02T17:59:21Z","modified":"2026-06-17T03:32:33Z","kev":{"date_added":"2021-11-03","due_date":"2021-11-17","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"pocgithub","id":"raymontag/cve-2021-1782","title":"raymontag/cve-2021-1782","date":"2021-02-04","url":"https://github.com/raymontag/cve-2021-1782"},{"source":"pocgithub","id":"synacktiv/CVE-2021-1782","title":"synacktiv/CVE-2021-1782","date":"2021-02-10","url":"https://github.com/synacktiv/CVE-2021-1782"}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"multiple products"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT212147","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT212146","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT212148","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT212149","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1782","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1782"},{"url":"https://github.com/advisories/GHSA-22jf-974v-hf7j"}],"sources":{"cve":[{"id":"CVE-2021-1782","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..","status":"published","published":"2021-04-02T17:59:21Z","modified":"2025-10-21T23:25:50.291Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:33:08.409321Z"}],"euvd":[{"id":"EUVD-2021-7246","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..","status":"published","published":"2021-04-02T17:59:21Z","modified":"2025-10-21T23:25:50Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T20:31:25.308373Z"}],"ghsa":[{"id":"GHSA-22jf-974v-hf7j","title":"A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2,...","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..","status":"published","published":"2022-05-24T17:46:20Z","modified":"2025-10-22T00:32:06Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269","CWE-667"],"updated_at":"2026-11-02T15:04:04.786232Z"}],"kev":[{"id":"CVE-2021-1782","title":"Apple Multiple Products Race Condition Vulnerability","description":"Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.","cwes":["CWE-362","CWE-667"],"kev":{"date_added":"2021-11-03","due_date":"2021-11-17","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2021-1782","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..","status":"published","published":"2021-04-02T18:15:21.373Z","modified":"2026-06-17T03:32:33.03Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:06:51.197859Z"}]}}