CVE-2021-30955

A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected

Apple · watchOS · iOS and iPadOS · macOS

CVSS v3.1 NVD

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

4.79% chance of exploitation in the next 30 days, 92nd percentile

Published

2021-08-24

Updated

2024-08-03

Proof-of-concept exploits (7)

• GeoSn0w/Pentagram-exploit-tester19★ · 2026-05-21
• b1n4r1b01/desc_race270★ · 2022-03-01
• markie-dev/desc_race_A1548★ · 2022-03-14
• nickorlow/CVE-2021-30955-POC1★ · 2022-02-28
• st-rnd/desc_race-10★ · 2022-03-15
• timb-machine-mirrors/jakeajames-CVE-2021-309550★ · 2022-02-28
• verygenericname/CVE-2021-30955-POC-IPA3★ · 2022-03-01

References

• CVE Record
• NVD entry

Related

• CVE-2025-24203
• CVE-2022-22587
• CVE-2022-22672
• CVE-2022-22675
• CVE-2025-24085
• CVE-2025-43300