CVE-2021-1861

An issue existed in determining cache occupancy. The issue was addressed through improved logic. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to track users by setting state in a cache.

• https://support.apple.com/en-us/HT212325Vendor Advisory
• https://support.apple.com/en-us/HT212325Vendor Advisory

Published

Sep 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1854A call termination issue with was addressed with improved lo…4.3
• CVE-2021-1855A logic issue was addressed with improved state management. …6.5
• CVE-2021-1857A memory initialization issue was addressed with improved me…6.5
• CVE-2021-1858Processing a maliciously crafted image may lead to arbitrary…7.8
• CVE-2021-1859A logic issue was addressed with improved state management. …7.5
• CVE-2021-1860A memory initialization issue was addressed with improved me…6.5
• CVE-2021-1862Description: A person with physical access may be able to ac…2.4
• CVE-2021-1863An issue existed with authenticating the action triggered by…2.4
• CVE-2021-1864A use after free issue was addressed with improved memory ma…9.8
• CVE-2021-1865An issue obscuring passwords in screenshots was addressed wi…5
• CVE-2021-1867An out-of-bounds read was addressed with improved input vali…8.8
• CVE-2021-1868A logic issue was addressed with improved state management. …7.8