CVE-2021-30955
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A...
- Published
- Aug 24, 2021
- Updated
- Aug 3, 2024
- Assigning CNA
- apple
- Evidence observed
- Aug 25, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HLow · next 30 days
- Percentile
- 91.8%
- Model date
- Oct 18, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
Sources
Jake Jame's proof of concept wrapped into an iOS app for CVE-2021-30955
- desc_race-1Exploit
desc_race exploit for iOS 15.0 - 15.1.1 (with stable kernel r/w primitives) (CVE-2021-30955)
- desc_racePoC
iOS 15.1 kernel exploit POC for CVE-2021-30955
A test app to check if your device is vulnerable to CVE-2021-30955
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.