Apple Fixes Actively Exploited Privilege-Escalation Flaw in macOS
Active Exploitation · 2 sources · Updated 2mo ago · First seen Apr 2, 2021
Apple released macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave to address numerous vulnerabilities affecting the kernel, WebKit, ImageIO, CoreText, CoreGraphics, CFNetwork, NetFSFramework, XNU, and other components. The flaws could enable denial of service, information disclosure, arbitrary code execution, and kernel-level compromise.
Among the fixes, CVE-2021-1782 is a race-condition flaw that allowed a malicious application to elevate privileges; Apple said it may have been actively exploited and corrected it through improved locking. Apple also reported potential in-the-wild exploitation of CVE-2021-1764 in the Kernel and CVE-2021-1789 in WebKit, underscoring the need to apply the available macOS security updates.
