CVE-2021-30677

This issue was addressed with improved environment sanitization. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to break out of its sandbox.

• https://support.apple.com/en-us/HT212528Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212529Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212532Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212533Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212600Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212603Release Notes, Vendor Advisory
• https://support.apple.com/kb/HT212602Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212528Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212529Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212532Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212533Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212600Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212603Release Notes, Vendor Advisory
• https://support.apple.com/kb/HT212602Release Notes, Vendor Advisory

Published

Sep 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30671A validation issue was addressed with improved logic. This i…3.3
• CVE-2021-30672A memory corruption issue was addressed with improved state …7.8
• CVE-2021-30673An access issue was addressed with improved access restricti…5.5
• CVE-2021-30674This issue was addressed with improved checks. This issue is…5.5
• CVE-2021-30675A memory corruption issue was addressed with improved state …7.8
• CVE-2021-30676A logic issue was addressed with improved state management. …7.1
• CVE-2021-30678A logic issue was addressed with improved state management. …9.8
• CVE-2021-30679This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2021-30680A logic issue was addressed with improved state management. …7.8
• CVE-2021-30681A validation issue existed in the handling of symlinks. This…7.8
• CVE-2021-30682A logic issue was addressed with improved restrictions. This…5.5
• CVE-2021-30683A use after free issue was addressed with improved memory ma…7.8