CVE-2021-30677: Apple iPadOS

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

This issue was addressed with improved environment sanitization. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to break out of its sandbox.

Affected products

• Apple iPadOS: before 14.6 (fixed in 14.6)
• Apple iPhone OS: before 14.6 (fixed in 14.6)
• Apple Mac OS X: from 10.14, up to and including 10.14.5; from 10.15, up to and including 10.15.6; version 10.14.6 only; version 10.15.7 only
• Apple macOS: from 11.0, before 11.4 (fixed in 11.4)
• Apple tvOS: before 14.6 (fixed in 14.6)
• Apple watchOS: before 7.5 (fixed in 7.5)

Published 2021-09-08. Last modified 2026-06-17.