{"metadata": {"vulnerability": "CVE-2021-30970", "count": 33, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 21}}, "data": [{"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-30970", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-08-24T00:00:00Z", "date_only": false, "value": "2021-08-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202108-1285", "record": "VAR-202108-1285", "field": "sources_update_date.data.1.date"}, {"timestamp": "2021-08-24T18:51:09Z", "date_only": false, "value": "2021-08-24T18:51:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-30970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-08-24T19:15:00Z", "date_only": false, "value": "2021-08-24T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-30970", "record": "GSD-2021-30970", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-08-24T19:15:22.853Z", "date_only": false, "value": "2021-08-24T19:15:22.853000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202108-1285", "record": "VAR-202108-1285", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-08-24T19:15:22.853Z", "date_only": false, "value": "2021-08-24T19:15:22.853", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-30970", "record": "FKIE_CVE-2021-30970", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-13T23:00:00Z", "date_only": false, "value": "2021-12-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0631", "record": "WID-SEC-W-2026-0631", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-13T23:00:00Z", "date_only": false, "value": "2021-12-13T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0631", "record": "WID-SEC-W-2026-0631", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-13T23:00:00Z", "date_only": false, "value": "2021-12-13T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0631", "record": "WID-SEC-W-2026-0631", "field": "vulnerabilities.35.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-14T00:00:00Z", "date_only": false, "value": "2021-12-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-945", "record": "CERTFR-2021-AVI-945", "field": "revisions.0.revision_date"}, {"timestamp": "2021-12-17T19:19:33Z", "date_only": false, "value": "2021-12-17T19:19:33", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202108-1285", "record": "VAR-202108-1285", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-12-23T20:02:19Z", "date_only": false, "value": "2021-12-23T20:02:19.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2021-30970", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-12-28T00:00:00Z", "date_only": false, "value": "2021-12-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202108-1285", "record": "VAR-202108-1285", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-12-28T21:02:00Z", "date_only": false, "value": "2021-12-28T21:02Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-30970", "record": "GSD-2021-30970", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-12-29T00:00:00Z", "date_only": false, "value": "2021-12-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202108-1285", "record": "VAR-202108-1285", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-01-11T08:13:09Z", "date_only": false, "value": "2022-01-11T08:13:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1780", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "9509c873-d107-47f5-be95-a002b81fa1a3", "content": "Microsoft has revealed details of a new macOS \"powerdir\" vulnerability (CVE-2021-30970) that could allow attackers to gain access to user data.\n\nRead details: https://thehackernews.com/2022/01/microsoft-details-macos-bug-that-could.html", "url": "https://t.me/thehackernews/1780"}, {"timestamp": "2022-01-11T14:14:01Z", "date_only": false, "value": "2022-01-11T14:14:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NeKaspersky/1664", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "8eda88ef-f521-4e45-bf4b-10fb59377ed1", "content": "Microsoft \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c macOS \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c powerdir \u0438\u043b\u0438 CVE-2021-30970 \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f macOS \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f (TCC), \u0441 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\nTCC \u2014 \u044d\u0442\u043e \u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 Mac, \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u0438 \u043a\u0430\u043c\u0435\u0440\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Apple \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a TCC \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0434\u0438\u0441\u043a\u0443 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u041d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft \u0441\u043c\u043e\u0433\u043b\u0438 \u043d\u0430\u0439\u0442\u0438 \u043e\u0431\u0445\u043e\u0434 \u0434\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 TCC, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u043d\u044f\u0442\u0435\u043d \u0438 \u043f\u0440\u043e\u0441\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435. \u0410 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0443, \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u044d\u043a\u0440\u0430\u043d\u0435 \u0438\u043b\u0438 \u0436\u0435 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0430.\n\nApple \u0443\u0436\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 13 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430. \u0410 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u0431\u0445\u043e\u0434\u043e\u0432 TCC. \u0412 \u043d\u0438\u0445 \u0432\u0445\u043e\u0434\u044f\u0442: CVE-2020-9771 (\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445, \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0445\u043e\u0434\u0438\u043b \u0444\u0430\u0439\u043b TCC.db, \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 TCC \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u0435\u0437 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0438\u0441\u043a\u0443), CVE-2020-9934 (\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0440\u0435\u0434\u044b $ HOME, \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 TCC.db, \u043d\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0439.) \u0438 CVE-2021-30713 (\u0438\u0437-\u0437\u0430 \u0434\u0430\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438, macOS \u0432\u044b\u0432\u043e\u0434\u0438\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u00ab\u0443\u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c\u00bb \u0435\u0433\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 TCC.).\n\n\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u0432\u0441\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0448\u043b\u0438 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u041d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e macOS WizardUpdate (\u043e\u043d \u0436\u0435 UpdateAgent \u0438\u043b\u0438 Vigram), \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0435 \u043d\u043e\u0432\u044b\u043c\u0438 \u0442\u0430\u043a\u0442\u0438\u043a\u0430\u043c\u0438 \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/1664"}, {"timestamp": "2022-01-11T15:43:55Z", "date_only": false, "value": "2022-01-11T15:43:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/11794", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "370b153c-8636-4bac-ad09-18bf49194cc9", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Microsoft \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c macOS, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e Transparency, Consent, and Control (TCC) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\nhttps://xakep.ru/2022/01/11/cve-2021-30970/", "url": "https://t.me/xakep_ru/11794"}, {"timestamp": "2022-01-12T10:34:18Z", "date_only": false, "value": "2022-01-12T10:34:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/alexmakus/4497", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "362c85cd-8d5c-49e1-a56f-b75c45d11731", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0442 Microsoft \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0439\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u043f\u0434\u0435\u0439\u0442 macOS 12.1 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u0414\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: https://www.microsoft.com/security/blog/2022/01/10/new-macos-vulnerability-powerdir-could-lead-to-unauthorized-user-data-access/\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30970\n\n\u0430\u043f\u0434\u0435\u0439\u0442 \u0441 \u0444\u0438\u043a\u0441\u043e\u043c https://support.apple.com/en-us/HT212978", "url": "https://t.me/alexmakus/4497"}, {"timestamp": "2022-02-24T23:00:00Z", "date_only": false, "value": "2022-02-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0631", "record": "WID-SEC-W-2026-0631", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-07T03:34:07.473Z", "date_only": false, "value": "2023-11-07T03:34:07.473000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202108-1285", "record": "VAR-202108-1285", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-12-13T01:23:30.977Z", "date_only": false, "value": "2023-12-13T01:23:30.977606Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-30970", "record": "GSD-2021-30970", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T11:29:34.772Z", "date_only": false, "value": "2023-12-18T11:29:34.772000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202108-1285", "record": "VAR-202108-1285", "field": "last_update_date"}, {"timestamp": "2024-08-03T22:48:14.203Z", "date_only": false, "value": "2024-08-03T22:48:14.203Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-30970", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T22:48:14.203Z", "date_only": false, "value": "2024-08-03T22:48:14.203Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-30970", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-14T13:05:19Z", "date_only": false, "value": "2025-01-14T13:05:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/5124", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "60c615f6-660d-4772-9cec-5e087e0df546", "content": "\u200b\u26a1\ufe0f\u0410\u0445\u0438\u043b\u043b\u0435\u0441\u043e\u0432\u0430 \u043f\u044f\u0442\u0430 macOS: \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u0430\u043c\u043e\u043c\u0443 \u0441\u0435\u0440\u0434\u0446\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apple macOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 System Integrity Protection (SIP) \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430.\n\nSIP \u2014 \u044d\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 macOS, \u0437\u0430\u0449\u0438\u0449\u0430\u044e\u0449\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439. \u041e\u043d\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c Apple \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0438\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c \u0441 \u043e\u0441\u043e\u0431\u044b\u043c\u0438 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u044f\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-44243, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0434\u0435\u043c\u043e\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u0435 Storage Kit, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u043c \u0437\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0434\u0438\u0441\u043a\u043e\u0432. \u0414\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, root-\u043f\u0440\u0430\u0432\u0430 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 SIP, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u00ab\u043d\u0435\u0443\u0434\u0430\u043b\u044f\u0435\u043c\u044b\u0435\u00bb \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0440\u0443\u0442\u043a\u0438\u0442\u044b, \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u0431\u0445\u043e\u0434\u044f \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n11 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f macOS Sequoia 15.2, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.\n\nSIP \u0438\u0433\u0440\u0430\u0435\u0442 \u043a\u043b\u044e\u0447\u0435\u0432\u0443\u044e \u0440\u043e\u043b\u044c \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 macOS \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0430\u0442\u0430\u043a. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Microsoft, \u043e\u0431\u0445\u043e\u0434 SIP \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0432\u0441\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0434\u0451\u0436\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043b\u0430 \u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 macOS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Shrootless (CVE-2021-30892), Migraine (CVE-2023-32369), Achilles (CVE-2022-42821) \u0438 Powerdir (CVE-2021-30970), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u0436\u0435 \u0441\u0430\u043c\u044b\u0445 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0435\u0440, \u043d\u043e \u0438 \u043f\u0440\u043e\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u0432\u043e\u0441\u0445\u0438\u0449\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5124"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0631", "record": "WID-SEC-W-2026-0631", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0631", "record": "WID-SEC-W-2026-0631", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-06T12:27:25.275Z", "date_only": false, "value": "2026-03-06T12:27:25.275+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0631", "record": "WID-SEC-W-2026-0631", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T03:51:14.350Z", "date_only": false, "value": "2026-06-17T03:51:14.350", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-30970", "record": "FKIE_CVE-2021-30970", "field": "lastModified"}, {"timestamp": "2026-07-29T12:03:22.956Z", "date_only": false, "value": "2026-07-29T12:03:22.956004Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/shmelovod/515", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "5f8455af-2625-4ae1-89da-531e95fe74ea", "content": "https://xakep.ru/2022/01/11/cve-2021-30970/", "url": "https://t.me/shmelovod/515"}, {"timestamp": "2026-08-04T05:00:03.828Z", "date_only": false, "value": "2026-08-04T05:00:03.828750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shmelovod/515", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "4b66e310-b926-41fa-bf17-e6aa8dd8b3dd", "content": "https://xakep.ru/2022/01/11/cve-2021-30970/", "url": "https://t.me/shmelovod/515", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:01:59.805Z", "date_only": false, "value": "2026-09-01T20:01:59.805777Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/38195", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "43522441-3184-4346-9b4b-8cb4340f470f", "content": "Black Hat Ethical Hacking\nMicrosoft: powerdir bug gives access to protected macOS user data\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Microsoft: powerdir bug gives access to protected macOS user dataPost Views: 71 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThe Microsoft 365 Defender Research Team has reported the vulnerability dubbed\u00a0powerdir\u00a0(tracked as CVE-2021-30970) to Apple on July 15, 2021, via the Microsoft Security Vulnerability Research (MSVR).\nMicrosoft says threat actors could use a macOS vulnerability to bypass Transparency, Consent, and Control (TCC) technology to access users\u2019 protected data.\n\nWhile Apple has restricted TCC access only to apps with full disk access and set up features to automatically block unauthorized code execution, Microsoft security researchers found that attackers could plant a second, specially crafted TCC database that would allow them to access protected user info.\n\n\u201cWe discovered that it is possible to programmatically change a target user\u2019s home directory and plant a fake TCC database, which stores the consent history of app requests,\u201d said\u00a0Jonathan Bar Or, a principal security researcher at Microsoft.\n\n\u201cIf exploited on unpatched systems, this vulnerability could allow a malicious actor to potentially orchestrate an attack based on the user\u2019s protected personal data.\nSee Also: Complete Offensive Security and Ethical Hacking Course\n\u201cFor example, the attacker could hijack an app installed on the device\u2014or install their own malicious app\u2014and access the microphone to record private conversations or capture screenshots of sensitive information displayed on the user\u2019s screen.\u201d\n\nApple has also patched other TCC bypasses reported since 2020, including:\n\n* Time Machine mounts\u00a0(CVE-2020-9771): macOS offers a built-in backup and restore solution called Time Machine. It was discovered that Time Machine backups could be mounted (using the apfs_mount utility) with the \u201cnoowners\u201d flag. Since these backups contain the TCC.db files, an attacker could mount those backups and determine the device\u2019s TCC policy without having full disk access.\n* Environment variable poisoning\u00a0(CVE-2020-9934): It was discovered that the user\u2019s tccd could build the path to the TCC.db file by expanding $HOME/Library/Application Support/com.apple.TCC/TCC.db. Since the user could manipulate the $HOME environment variable (as introduced to tccd by launchd), an attacker could plant a chosen TCC.db file in an arbitrary path, poison the $HOME environment variable, and make TCC.db consume that file instead.\n* Bundle conclusion issue\u00a0(CVE-2021-30713): First disclosed by Jamf\u00a0in a blog post about the XCSSET malware family, this bug abused how macOS was deducing app bundle information. For example, suppose an attacker knows of a specific app that commonly has microphone access. In that case, they could plant their application code in the target app\u2019s bundle and \u201cinherit\u201d its TCC capabilities.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/powerdir_poc.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/38195"}], "metrics": {"as_of": "2026-10-30T11:49:28.032Z", "anchors": {"origin": {"timestamp": "2021-08-24T18:51:09Z", "date_only": false, "value": "2021-08-24T18:51:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-30970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-08-24T18:51:09Z", "date_only": false, "value": "2021-08-24T18:51:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-30970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-04T05:00:03.828Z", "date_only": false, "value": "2026-08-04T05:00:03.828750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shmelovod/515", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "4b66e310-b926-41fa-bf17-e6aa8dd8b3dd", "content": "https://xakep.ru/2022/01/11/cve-2021-30970/", "url": "https://t.me/shmelovod/515", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 155988534.828, "hours": 43330.148563333336, "days": 1805.4228568055557, "min_seconds": 155988534.828, "max_seconds": 155988534.828, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-08-24T18:51:09Z", "date_only": false, "value": "2021-08-24T18:51:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-30970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-04T05:00:03.828Z", "date_only": false, "value": "2026-08-04T05:00:03.828750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shmelovod/515", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "4b66e310-b926-41fa-bf17-e6aa8dd8b3dd", "content": "https://xakep.ru/2022/01/11/cve-2021-30970/", "url": "https://t.me/shmelovod/515", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 163529899.032997, "hours": 45424.97195361028, "days": 1892.7071647337616, "min_seconds": 163529899.032997, "max_seconds": 163529899.032997, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-08-24T18:51:09Z", "date_only": false, "value": "2021-08-24T18:51:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-30970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T11:49:28.032Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 7541364.204997, "hours": 2094.8233902769443, "days": 87.28430792820602, "min_seconds": 7541364.204997, "max_seconds": 7541364.204997, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-04T05:00:03.828Z", "date_only": false, "value": "2026-08-04T05:00:03.828750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shmelovod/515", "record": "CVE-2021-30970", "field": "creation_timestamp", "uuid": "4b66e310-b926-41fa-bf17-e6aa8dd8b3dd", "content": "https://xakep.ru/2022/01/11/cve-2021-30970/", "url": "https://t.me/shmelovod/515", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-30T11:49:28.032Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}