Actively exploited in the wild

Apple Multiple Products Race Condition Vulnerability

Apple - Multiple Products · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2021-1782

HighCVSS 7.0KEV

Published: 02/04/2021(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

A race condition exists in Apple products (macOS, iOS, iPadOS, watchOS, tvOS) due to improper locking. A malicious application may be able to elevate privileges. Apple is aware of reports that this issue may have been actively exploited.

Risk Assessment

A local attacker could elevate privileges and gain access to protected system resources, posing a serious threat to device security.

Recommendation

Immediately update Apple systems to macOS Big Sur 11.2, Security Update 2021-001 Catalina/Mojave, iOS/iPadOS 14.4, watchOS 7.3, tvOS 14.4.

Other vulnerabilities in Apple Kernel

CVE-2023-32434HighActively exploited
An integer overflow was addressed with improved input validation. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.

Original NVD description (English source)

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..