Vulnerability in iMovie 10.2.4 Allows Malicious App Access to Entitlements and Privacy Permissions

Vulnerability in iMovie 10.2.4 Allows Malicious App Access to Entitlements and Privacy Permissions

CVE-2021-30757 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.

Learn more about our Web Application Penetration Testing UK.