Vulnerabilities > CVE-2021-30972 - Incorrect Authorization vulnerability in Apple mac OS X and Macos

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
local
low complexity
apple
CWE-863

Summary

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences.

Common Weakness Enumeration (CWE)