{"metadata": {"vulnerability": "cve-2021-30833", "count": 31, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 21}}, "data": [{"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-30833", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-10-25T00:00:00Z", "date_only": false, "value": "2021-10-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_release_date.data.4.date", "linked_record": true}, {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-825", "record": "CERTFR-2021-AVI-825", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2021-10-27T16:36:46Z", "date_only": false, "value": "2021-10-27T16:36:46", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_release_date.data.2.date", "linked_record": true}, {"timestamp": "2021-10-28T00:00:00Z", "date_only": false, "value": "2021-10-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_release_date.data.0.date", "linked_record": true}, {"timestamp": "2021-10-28T18:17:15Z", "date_only": false, "value": "2021-10-28T18:17:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-30833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-28T19:15:00Z", "date_only": false, "value": "2021-10-28T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J64F-JW3R-9C68", "record": "GHSA-J64F-JW3R-9C68", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-10-28T19:15:00Z", "date_only": false, "value": "2021-10-28T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-30833", "record": "GSD-2021-30833", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-10-28T19:15:09.223Z", "date_only": false, "value": "2021-10-28T19:15:09.223000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_release_date.data.5.date", "linked_record": true}, {"timestamp": "2021-10-28T19:15:09.223Z", "date_only": false, "value": "2021-10-28T19:15:09.223", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-30833", "record": "FKIE_CVE-2021-30833", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-10-28T22:17:50Z", "date_only": false, "value": "2021-10-28T22:17:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/31426", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "d99c6af4-fce2-4303-b591-d20e4dddc0a4", "content": "\u203c CVE-2021-30833 \u203c\n\nThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/31426"}, {"timestamp": "2021-10-29T11:33:01Z", "date_only": false, "value": "2021-10-29T11:33:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/4623", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "e8361e7b-ae21-4561-94ef-5b7c60c573d7", "content": "#Threat_Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833", "url": "https://t.me/CyberSecurityTechnologies/4623"}, {"timestamp": "2022-05-24T19:19:00Z", "date_only": false, "value": "2022-05-24T19:19:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J64F-JW3R-9C68", "record": "GHSA-J64F-JW3R-9C68", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-26T05:06:38Z", "date_only": false, "value": "2022-05-26T05:06:38.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "cve-2021-30833", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-27T00:01:25Z", "date_only": false, "value": "2022-05-27T00:01:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J64F-JW3R-9C68", "record": "GHSA-J64F-JW3R-9C68", "field": "modified", "linked_record": true}, {"timestamp": "2022-05-30T00:00:00Z", "date_only": false, "value": "2022-05-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2022-10-11T00:00:00Z", "date_only": false, "value": "2022-10-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2022-10-11T20:05:00Z", "date_only": false, "value": "2022-10-11T20:05Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-30833", "record": "GSD-2021-30833", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-10-11T20:05:03.843Z", "date_only": false, "value": "2022-10-11T20:05:03.843000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2022-10-17T09:11:00Z", "date_only": false, "value": "2022-10-17T09:11:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2023-12-13T01:23:31.955Z", "date_only": false, "value": "2023-12-13T01:23:31.955561Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-30833", "record": "GSD-2021-30833", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-08T14:44:44Z", "date_only": false, "value": "2024-05-08T14:44:44", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "sources_release_date.data.3.date", "linked_record": true}, {"timestamp": "2024-05-12T02:08:40.085Z", "date_only": false, "value": "2024-05-12T02:08:40.085000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202110-1429", "record": "VAR-202110-1429", "field": "last_update_date", "linked_record": true}, {"timestamp": "2024-08-03T22:48:13.225Z", "date_only": false, "value": "2024-08-03T22:48:13.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-30833", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T22:48:13.225Z", "date_only": false, "value": "2024-08-03T22:48:13.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-30833", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:50:58.357Z", "date_only": false, "value": "2026-06-17T03:50:58.357", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-30833", "record": "FKIE_CVE-2021-30833", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:02:52.190Z", "date_only": false, "value": "2026-07-29T12:02:52.190272Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1737", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "02bb0930-9755-4ee6-8de1-fb1e2ac9f4ac", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "url": "https://t.me/reverseame/1737"}, {"timestamp": "2026-08-03T05:00:04.491Z", "date_only": false, "value": "2026-08-03T05:00:04.491179Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1737", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "f24cc73f-b8d5-4f3e-8a0a-22aff2d46ee5", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "url": "https://t.me/reverseame/1737", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:36.873Z", "date_only": false, "value": "2026-09-01T17:00:36.873362Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4713", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "efe93e9c-51af-47c0-8d3c-728ee944aef1", "content": "Threat Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833\n\nexploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master\n\nMalware analysis\n1. More Malicious NPM Libraries\nhttps://www.theregister.com/2021/10/27/npm_roblox_ransomware\n2. New AbstractEmu malware roots Android devices\nhttps://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign\n\nCloud Security\nSnowcat: World\u2019s First Dedicated Security Scanner for Istio\nhttps://www.praetorian.com/blog/introducing-snowcat\n]-> https://github.com/praetorian-inc/snowcat", "url": "https://t.me/cissp/4713"}, {"timestamp": "2026-09-10T16:00:05.624Z", "date_only": false, "value": "2026-09-10T16:00:05.624750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4713", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "824481d8-3195-4be3-b699-a794e2e9b837", "content": "Threat Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833\n\nexploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master\n\nMalware analysis\n1. More Malicious NPM Libraries\nhttps://www.theregister.com/2021/10/27/npm_roblox_ransomware\n2. New AbstractEmu malware roots Android devices\nhttps://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign\n\nCloud Security\nSnowcat: World\u2019s First Dedicated Security Scanner for Istio\nhttps://www.praetorian.com/blog/introducing-snowcat\n]-> https://github.com/praetorian-inc/snowcat", "url": "https://t.me/cissp/4713", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-08T17:00:15.562Z", "anchors": {"origin": {"timestamp": "2021-10-28T18:17:15Z", "date_only": false, "value": "2021-10-28T18:17:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-30833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-10-28T18:17:15Z", "date_only": false, "value": "2021-10-28T18:17:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-30833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-03T05:00:04.491Z", "date_only": false, "value": "2026-08-03T05:00:04.491179Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1737", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "f24cc73f-b8d5-4f3e-8a0a-22aff2d46ee5", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "url": "https://t.me/reverseame/1737", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 150288169.491, "hours": 41746.7137475, "days": 1739.4464061458334, "min_seconds": 150288169.491, "max_seconds": 150288169.491, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-28T18:17:15Z", "date_only": false, "value": "2021-10-28T18:17:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-30833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-03T05:00:04.491Z", "date_only": false, "value": "2026-08-03T05:00:04.491179Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1737", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "f24cc73f-b8d5-4f3e-8a0a-22aff2d46ee5", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "url": "https://t.me/reverseame/1737", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 158712180.562781, "hours": 44086.71682299473, "days": 1836.9465342914468, "min_seconds": 158712180.562781, "max_seconds": 158712180.562781, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-28T18:17:15Z", "date_only": false, "value": "2021-10-28T18:17:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-30833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T17:00:15.562Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 8424011.071781, "hours": 2340.0030754947225, "days": 97.50012814561343, "min_seconds": 8424011.071781, "max_seconds": 8424011.071781, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-03T05:00:04.491Z", "date_only": false, "value": "2026-08-03T05:00:04.491179Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1737", "record": "CVE-2021-30833", "field": "creation_timestamp", "uuid": "f24cc73f-b8d5-4f3e-8a0a-22aff2d46ee5", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "url": "https://t.me/reverseame/1737", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T17:00:15.562Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}