7.5 High Exploited

CVE-2021-31010 Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Not observed so far

Weakness CWE-20, CWE-502

Description

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..

Affected products and versions

Product	Affected versions	Fixed in
macOS 2021	earliest → < 2021	2021
watchOS 12.5	earliest → < 12.5	12.5

References

support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com

Timeline

Published August 24, 2021
Added to the KEV catalogue August 25, 2022
Last modified October 21, 2025

The 3813 CVEs of macOS →

CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking 5.5 Medium CVE-2026-65327 A logic issue was addressed with improved checks 8.4 High

Track this CVE