CVE-2021-30975: Apple Mac OS X

High severity, CVSS 8.6. EPSS: 1.8% chance of exploitation in the next 30 days.

This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.

Affected products

• Apple Mac OS X: from 10.15, before 10.15.7 (fixed in 10.15.7); version 10.15.7 only
• Apple macOS: from 11.0, before 11.6.2 (fixed in 11.6.2); from 12.0, before 12.1 (fixed in 12.1)

Published 2021-08-24. Last modified 2026-06-17.