Privilege escalation vulnerability in Messages in Apple Mac OS - CVE-2021-30904ID: oval:org.secpod.oval:def:76178 | Date: (C)2021-11-22 (M)2023-11-13 |
Class: VULNERABILITY | Family: macos |
The host is installed with Apple Mac OS 12 before 12.0.1 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle a state validation issue. Successful exploitation allows an attacker to sync a user's messages even after the user has signed out of iMessage.