CVE-2021-1873: Apple Mac OS X

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text fields.

Affected products

• Apple Mac OS X: from 10.14, up to and including 10.14.5; from 10.15, up to and including 10.15.5; version 10.14.6 only; version 10.15.6 only; version 10.15.7 only
• Apple macOS: from 11.0, before 11.3 (fixed in 11.3)

Published 2021-09-08. Last modified 2026-06-17.