Privilege Escalation Vulnerability: Unprivileged Application NVRAM Variable Editing

Privilege Escalation Vulnerability: Unprivileged Application NVRAM Variable Editing

CVE-2021-30913 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

The issue was addressed with improved permissions logic. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. An unprivileged application may be able to edit NVRAM variables.

Learn more about our Cis Benchmark Audit For Apple Macos.