CVE-2021-1782

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..

• CWE-667
• CWE-667

• https://support.apple.com/en-us/HT212146Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212147Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212148Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212149Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212146Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212147Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212148Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212149Release Notes, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1782US Government Resource

Published

Apr 2, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1776An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2021-1777This issue was addressed with improved checks. This issue is…7.8
• CVE-2021-1778An out-of-bounds read issue existed in the curl. This issue …5.5
• CVE-2021-1779A logic error in kext loading was addressed with improved st…7.8
• CVE-2021-1780A memory initialization issue was addressed with improved me…4.4
• CVE-2021-1781A privacy issue existed in the handling of Contact cards. Th…5.5
• CVE-2021-1783An access issue was addressed with improved memory managemen…7.8
• CVE-2021-1784A permissions issue existed in DiskArbitration. This was add…7.5
• CVE-2021-1785An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2021-1786A logic issue was addressed with improved state management. …5.5
• CVE-2021-1787Multiple issues were addressed with improved logic. This iss…7.8
• CVE-2021-1788A use after free issue was addressed with improved memory ma…8.8