Apple Boot Camp vulnerabilities

2 CVEs affecting Apple Boot Camp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-30675, published 2021-09-08.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-30675, published 2021-09-08. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. A memory corruption issue was addressed with improved state management. This issue is fixed in Boot Camp 6.1.14. A malicious application may be able to elevate privileges.
• CVE-2014-1253, published 2014-02-14. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable…