Security Advisory

CVE-2021-30975

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-24 18:51:14
Last updated 2024-08-03 22:48:14
Assigner apple
State PUBLISHED

Description

This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.