{"metadata": {"vulnerability": "CVE-2021-1815", "count": 33, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 25}}, "data": [{"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-1815", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.7.date"}, {"timestamp": "2021-04-14T00:00:00Z", "date_only": false, "value": "2021-04-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-04-27T00:00:00Z", "date_only": false, "value": "2021-04-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.8.date"}, {"timestamp": "2021-04-27T00:00:00Z", "date_only": false, "value": "2021-04-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-314", "record": "CERTFR-2021-AVI-314", "field": "revisions.0.revision_date"}, {"timestamp": "2021-04-28T14:54:48Z", "date_only": false, "value": "2021-04-28T14:54:48", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.5.date"}, {"timestamp": "2021-04-28T14:55:56Z", "date_only": false, "value": "2021-04-28T14:55:56", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-04-28T15:10:17Z", "date_only": false, "value": "2021-04-28T15:10:17", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-04-28T15:11:14Z", "date_only": false, "value": "2021-04-28T15:11:14", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-05-06T16:22:33Z", "date_only": false, "value": "2021-05-06T16:22:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/43985", "record": "CVE-2021-1815", "field": "creation_timestamp", "uuid": "3e127007-f78a-4313-9ea1-fe76a8deaf65", "content": "CVE-2021-1815 \u2013 macOS local privilege escalation via Preferences\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/\n\nApple recently fixed three vulnerabilities in macOS 11.3\u2019s Preferences. Here we present\n\nour writeup about how we identified one of the issues, and how we exploited it.\nThe post CVE-2021-1815 - macOS local privilege escalation via Preferences (https://www.offensive-security.com/offsec/macos-preferences-priv-escalation/) first appeared on Offensive Security (https://www.offensive-security.com/).", "url": "https://t.me/information_security_channel/43985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-09-08T00:00:00Z", "date_only": false, "value": "2021-09-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-09-08T14:54:29Z", "date_only": false, "value": "2021-09-08T14:54:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-1815", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-09-08T14:54:29Z", "date_only": false, "value": "2021-09-08T14:54:29.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2021-1815", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-09-08T15:15:00Z", "date_only": false, "value": "2021-09-08T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VX92-QGJQ-H8FV", "record": "GHSA-VX92-QGJQ-H8FV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-09-08T15:15:00Z", "date_only": false, "value": "2021-09-08T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-1815", "record": "GSD-2021-1815", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-09-08T15:15:09.837Z", "date_only": false, "value": "2021-09-08T15:15:09.837000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.6.date"}, {"timestamp": "2021-09-08T15:15:09.837Z", "date_only": false, "value": "2021-09-08T15:15:09.837", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1815", "record": "FKIE_CVE-2021-1815", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-09-17T00:00:00Z", "date_only": false, "value": "2021-09-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_update_date.data.4.date"}, {"timestamp": "2022-05-24T19:13:38Z", "date_only": false, "value": "2022-05-24T19:13:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VX92-QGJQ-H8FV", "record": "GHSA-VX92-QGJQ-H8FV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-09-15T00:00:00Z", "date_only": false, "value": "2022-09-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-09-15T07:08:00Z", "date_only": false, "value": "2022-09-15T07:08:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-10-18T00:00:00Z", "date_only": false, "value": "2022-10-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-10-18T17:59:00Z", "date_only": false, "value": "2022-10-18T17:59Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-1815", "record": "GSD-2021-1815", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-10-18T17:59:57.377Z", "date_only": false, "value": "2022-10-18T17:59:57.377000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-10-18T19:00:31Z", "date_only": false, "value": "2022-10-18T19:00:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VX92-QGJQ-H8FV", "record": "GHSA-VX92-QGJQ-H8FV", "field": "modified"}, {"timestamp": "2023-12-13T01:23:23.603Z", "date_only": false, "value": "2023-12-13T01:23:23.603626Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1815", "record": "GSD-2021-1815", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T11:01:47.352Z", "date_only": false, "value": "2023-12-18T11:01:47.352000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202109-0281", "record": "VAR-202109-0281", "field": "last_update_date"}, {"timestamp": "2024-08-03T16:25:05.721Z", "date_only": false, "value": "2024-08-03T16:25:05.721Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-1815", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T16:25:05.721Z", "date_only": false, "value": "2024-08-03T16:25:05.721Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-1815", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-04T15:07:51Z", "date_only": false, "value": "2024-10-04T15:07:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3314", "record": "CVE-2021-1815", "field": "creation_timestamp", "uuid": "95a68fd7-4ade-4174-95ba-3b4d9ceb0082", "content": "#exploit\nCVE-2021-1815:\nmacOS LPE Via Preferences\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation\n]-> Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020", "url": "https://t.me/CyberSecurityTechnologies/3314", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T03:32:36.677Z", "date_only": false, "value": "2026-06-17T03:32:36.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1815", "record": "FKIE_CVE-2021-1815", "field": "lastModified"}, {"timestamp": "2026-09-01T17:00:50.783Z", "date_only": false, "value": "2026-09-01T17:00:50.783033Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3148", "record": "CVE-2021-1815", "field": "creation_timestamp", "uuid": "7dce6e83-3cb1-4ec7-a923-1a2cc5650f56", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "url": "https://t.me/cissp/3148"}, {"timestamp": "2026-09-11T07:00:04.997Z", "date_only": false, "value": "2026-09-11T07:00:04.997068Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3148", "record": "CVE-2021-1815", "field": "creation_timestamp", "uuid": "9e397cbf-fdbf-440a-86e0-ce83efc98120", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "url": "https://t.me/cissp/3148", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-10-29T01:04:52.078Z", "anchors": {"origin": {"timestamp": "2021-09-08T14:54:29Z", "date_only": false, "value": "2021-09-08T14:54:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-1815", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-09-08T14:54:29Z", "date_only": false, "value": "2021-09-08T14:54:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-1815", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-05-06T16:22:33Z", "date_only": false, "value": "2021-05-06T16:22:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/43985", "record": "CVE-2021-1815", "field": "creation_timestamp", "uuid": "3e127007-f78a-4313-9ea1-fe76a8deaf65", "content": "CVE-2021-1815 \u2013 macOS local privilege escalation via Preferences\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/\n\nApple recently fixed three vulnerabilities in macOS 11.3\u2019s Preferences. Here we present\n\nour writeup about how we identified one of the issues, and how we exploited it.\nThe post CVE-2021-1815 - macOS local privilege escalation via Preferences (https://www.offensive-security.com/offsec/macos-preferences-priv-escalation/) first appeared on Offensive Security (https://www.offensive-security.com/).", "url": "https://t.me/information_security_channel/43985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -10794716.0, "hours": -2998.532222222222, "days": -124.9388425925926, "min_seconds": -10794716.0, "max_seconds": -10794716.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2021-09-08T14:54:29Z", "date_only": false, "value": "2021-09-08T14:54:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-1815", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-05-06T16:22:33Z", "date_only": false, "value": "2021-05-06T16:22:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/43985", "record": "CVE-2021-1815", "field": "creation_timestamp", "uuid": "3e127007-f78a-4313-9ea1-fe76a8deaf65", "content": "CVE-2021-1815 \u2013 macOS local privilege escalation via Preferences\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/\n\nApple recently fixed three vulnerabilities in macOS 11.3\u2019s Preferences. Here we present\n\nour writeup about how we identified one of the issues, and how we exploited it.\nThe post CVE-2021-1815 - macOS local privilege escalation via Preferences (https://www.offensive-security.com/offsec/macos-preferences-priv-escalation/) first appeared on Offensive Security (https://www.offensive-security.com/).", "url": "https://t.me/information_security_channel/43985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 162123023.07851, "hours": 45034.173077363885, "days": 1876.4238782234952, "min_seconds": 162123023.07851, "max_seconds": 162123023.07851, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-08T14:54:29Z", "date_only": false, "value": "2021-09-08T14:54:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-1815", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T01:04:52.078Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 172917739.07851, "hours": 48032.70529958611, "days": 2001.3627208160879, "min_seconds": 172917739.07851, "max_seconds": 172917739.07851, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-05-06T16:22:33Z", "date_only": false, "value": "2021-05-06T16:22:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/43985", "record": "CVE-2021-1815", "field": "creation_timestamp", "uuid": "3e127007-f78a-4313-9ea1-fe76a8deaf65", "content": "CVE-2021-1815 \u2013 macOS local privilege escalation via Preferences\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/\n\nApple recently fixed three vulnerabilities in macOS 11.3\u2019s Preferences. Here we present\n\nour writeup about how we identified one of the issues, and how we exploited it.\nThe post CVE-2021-1815 - macOS local privilege escalation via Preferences (https://www.offensive-security.com/offsec/macos-preferences-priv-escalation/) first appeared on Offensive Security (https://www.offensive-security.com/).", "url": "https://t.me/information_security_channel/43985", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T01:04:52.078Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}