CVE-2021-30657

MediumPublished

Apple macOS Unspecified Vulnerability

Published: Sep 8, 2021
Updated: Oct 21, 2025
Assigning CNA: apple
Evidence observed: Nov 3, 2021

Primary CVSS

5.5/ 10Medium

nvd · CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS probability estimate

68.5%

High · next 30 days

Percentile: 99.3%
Model date: Oct 19, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

macOS Gatekeeper check bypassModule
modules/exploits/osx/browser/osx_gatekeeper_bypass.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: 1e321cedaf4cRelated tool
Declared conditions
- platform: OSX,Python,Unix($.exploit_osx/browser/osx_gatekeeper_bypass.platform)
- verification: check_not_declared($.exploit_osx/browser/osx_gatekeeper_bypass.check)

CVE-2021-30657PoC
A sample POC for CVE-2021-30657 affecting MacOS
CVE-2021-30853PoC

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.