{"metadata": {"vulnerability": "cve-2021-30657", "count": 74, "kinds": {"milestone": 5, "sighting": 29, "kev": 11, "other": 29}}, "data": [{"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_release_date.data.1.date"}, {"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-30657", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-04-14T00:00:00Z", "date_only": false, "value": "2021-04-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_update_date.data.1.date"}, {"timestamp": "2021-04-27T00:00:00Z", "date_only": false, "value": "2021-04-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-04-27T00:00:00Z", "date_only": false, "value": "2021-04-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-314", "record": "CERTFR-2021-AVI-314", "field": "last_revision_date"}, {"timestamp": "2021-04-27T00:00:00Z", "date_only": false, "value": "2021-04-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-314", "record": "CERTFR-2021-AVI-314", "field": "initial_release_date"}, {"timestamp": "2021-04-27T00:00:00Z", "date_only": false, "value": "2021-04-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-314", "record": "CERTFR-2021-AVI-314", "field": "revisions.0.revision_date"}, {"timestamp": "2021-04-27T11:27:31Z", "date_only": false, "value": "2021-04-27T11:27:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1651", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "0e6b4129-2958-42d0-ba50-c0f60cf0cbbe", "content": "\u0412\u0447\u0435\u0440\u0430 Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f macOS 11.3 Big Sur \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 iOS 14.5, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 macOS - Catalina \u0438 Mojave.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c Mac, \u0442\u043e \u0432\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0418 \u0432\u043e\u0442 \u043f\u043e\u0447\u0435\u043c\u0443.\n\n\u0421\u0432\u0435\u0436\u0438\u0439 \u0430\u043f\u0434\u0435\u0439\u0442, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-30657, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0437\u0430\u0448\u0438\u0442\u044b macOS - Gatekeeper, Notarization \u0438 File Quarantine - \u0438 \u0441\u0440\u0430\u0437\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0439\u0448\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0432\u0435\u0441\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0438\u0441\u0430\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041f\u0430\u0442\u0440\u0438\u043a \u0423\u043e\u0440\u0434\u043b, \u0430 \u043c\u044b \u043b\u0438\u0448\u044c \u0437\u0430\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043b\u044e\u0431\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u043f\u0440\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u0435 \u043c\u0435\u0442\u0430\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Info.plist \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c macOS \u043a\u0430\u043a \"\u043d\u0435 bundle\" \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u0432 \u043e\u0431\u0445\u043e\u0434 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b.  \u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0432 macOS 10.15 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2019 \u0433\u043e\u0434\u0430 \u043d\u043e\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2021 \u0433\u043e\u0434\u0430 \u0423\u043e\u0440\u0434\u043b \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0441\u044f \u043a \u043a\u043e\u043b\u043b\u0435\u0433\u0430\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Jamf, \u043a\u043e\u0442\u043e\u0440\u044b\u0435  \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 CVE-2021-30657 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0432 \u0434\u0440\u043e\u043f\u043f\u0435\u0440\u0435 Shlayer. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u0443\u044e \u0432\u044b\u0434\u0430\u0447\u0443 \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043d\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0432\u0441\u0435\u0433\u043e \u0432\u044b\u0448\u0435\u0441\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 Mac. \u0410 \u0437\u0430\u043e\u0434\u043d\u043e \u0438 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Apple.", "url": "https://t.me/true_secator/1651"}, {"timestamp": "2021-04-27T15:35:04Z", "date_only": false, "value": "2021-04-27T15:35:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SecLabNews/10112", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "fa50442b-ac76-468c-b568-c25a1f4df925", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b macOS, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2021-30657). \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0435 \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041e\u0421 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS.\n\n \n\nhttps://www.securitylab.ru/news/519416.php", "url": "https://t.me/SecLabNews/10112"}, {"timestamp": "2021-04-27T17:20:13Z", "date_only": false, "value": "2021-04-27T17:20:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/10695", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "0f82afbb-29b5-4654-bfaf-0a2ef3e47890", "content": "\u0412 macOS \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043c\u0430\u043b\u0432\u0430\u0440\u044c Shlayer\n\nApple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 macOS Big Sur 11.3, \u0433\u0434\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u044b. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043c\u0430\u043b\u0432\u0430\u0440\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 Gatekeeper, Apple File Quarantine \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043d\u043e\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\nhttps://xakep.ru/2021/04/27/cve-2021-30657/", "url": "https://t.me/xakep_ru/10695"}, {"timestamp": "2021-05-07T14:18:11Z", "date_only": false, "value": "2021-05-07T14:18:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/osx_gatekeeper_bypass.rb", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "20225505-0152-4f4f-b584-8f28042d9185", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/osx_gatekeeper_bypass.rb"}, {"timestamp": "2021-05-08T02:40:22Z", "date_only": false, "value": "2021-05-08T02:40:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/389", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "4440f179-5610-40a4-9862-8c3a824b0a62", "content": "CVE-2021-30657 macOS Gatekeeper\u6aa2\u67e5\u7e5e\u904e\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-30657_macOS_Gatekeeper%E6%AA%A2%E6%9F%A5%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/389"}, {"timestamp": "2021-05-25T12:03:30Z", "date_only": false, "value": "2021-05-25T12:03:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1747", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "0f59b8f5-42d7-4c70-bd41-96fb99e0f00a", "content": "\u200b\u200b\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e. \u041d\u0430\u0447\u043d\u0435\u043c \u043f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443.\n\n\u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0437\u0430\u043a\u0440\u044b\u043b\u0438 CVE-2021-30663 \u0438 CVE-2021-30665 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 WebKit \u0434\u043b\u044f tvOS. \u042d\u0442\u043e \u0442\u0435 \u0441\u0430\u043c\u044b\u0435 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u044f\u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043a\u0430\u0445 \u0435\u0449\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f \u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u043e\u0448\u0438\u0431\u043a\u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Apple, \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 (\u0445\u043e\u0442\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e). \u041f\u043e\u0447\u0435\u043c\u0443 \u0432 \u0442\u0430\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0445 \u0442\u0430\u043a \u0434\u043e\u043b\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 \u0432 tvOS - \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-30713 \u0434\u043b\u044f macOS Big Sur. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0445\u0430\u043a\u0435\u0440\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c TCC, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u044f\u0432\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, - \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u043c\u0435\u0440\u0435, \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443, \u043a\u0435\u0439\u043b\u043e\u0433\u0433\u0438\u043d\u0433, \u0441\u043d\u044f\u0442\u0438\u0435 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432 \u0438 \u043f\u0440, \u0438 \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u044d\u0442\u043e \u0431\u0435\u0437 \u043e\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Jamf, \u0442\u0435 \u0440\u0435\u0431\u044f\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0448\u043b\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u0440\u0443\u0433\u043e\u0439 \u043c\u0430\u043a\u043e\u0441\u043e\u0432\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-30657  \u0432 \u0434\u0440\u043e\u043f\u043f\u0435\u0440\u0435 Shlayer, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u043c XCSSET \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0440\u0430\u043d \u0432 macOS. \n\nXCSSET \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u044f\u043f\u043e\u043d\u0446\u0430\u043c\u0438 \u0438\u0437 TrendMicro \u0438 \u0443\u0436\u0435 \u0442\u043e\u0433\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0434\u0432\u0435 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 macOS. \u0421\u0443\u0434\u044f \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0443 \u043e\u043d \u043d\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u043a \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u043c\u0443 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0443, \u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0438\u0441\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u043b\u0432\u0430\u0440\u044c\u044e, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 Xcode (\u0447\u0442\u043e \u0441\u0430\u043c\u043e \u043f\u043e \u0441\u0435\u0431\u0435 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e).\n\n\u0412-\u0442\u0440\u0435\u0442\u044c\u0438\u0445, \u0432\u044b\u0448\u043b\u0430 iOS 14.6, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043c\u0438\u043c\u043e \u043a\u0443\u0447\u0438 \u0441\u0432\u0438\u0441\u0442\u043e\u043f\u0435\u0440\u0434\u0435\u043b\u043e\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0441\u0442\u044c \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u0443\u0447\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a RCE \u0438 XSS \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u044c\u043d\u043e\u043c WebKit, \u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043b\u044e\u0431\u043e\u043f\u044b\u0442\u043d\u044b\u0435 - CVE-20201-30707 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0432 6,3, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u043e\u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c - \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0430\u0443\u0434\u0438\u043e\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0442 \u043d\u0435\u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 WhatsApp.", "url": "https://t.me/true_secator/1747"}, {"timestamp": "2021-07-26T14:03:25Z", "date_only": false, "value": "2021-07-26T14:03:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1940", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "ea7ae1c0-3d68-413b-b7a4-bb0131265bec", "content": "Telegram \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0435!\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 Trend Micro (\u043c\u044b \u0432\u0441\u0435 \u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043d\u0435 \u0441\u043e\u0432\u0441\u0435\u043c \u044f\u043f\u043e\u043d\u0441\u043a\u0430\u044f, \u043d\u043e \u0441\u0443\u0442\u044c \u043d\u0435 \u0432 \u044d\u0442\u043e\u043c) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430 XCSSET \u0434\u043b\u044f macOS Big Sur, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u0440\u0430\u0436\u0443 Telegram-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432.\n\n\u041a\u0430\u043a \u043c\u044b \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b\u0438 \u044d\u0442\u0430 \u043c\u0430\u043b\u0432\u0430\u0440\u044c \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0442\u0435\u043c\u0438 \u0436\u0435 Trend Micro \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0432\u0435 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 macOS. \u0421\u0443\u0434\u044f \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0443 \u043e\u043d\u0430 \u043d\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b\u0430 \u043a \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u043c\u0443 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0443, \u0430 \u044f\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0447\u0438\u0441\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u043b\u0432\u0430\u0440\u044c\u044e, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 Xcode. \n\n\u0412 \u043c\u0430\u0435 \u0433\u043e\u0434\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Jamf \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e XCSSET \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-30657 \u0432 Big Sur \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0440\u0430\u043d \u0432 macOS.\n\n\u0418 \u0432\u043e\u0442 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u043b\u043e\u0432\u043e \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u044f\u043b\u0438 \u044f\u043f\u043e\u043d\u0441\u043a\u0438\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b. \u041d\u043e\u0432\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b XCSSET \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0443 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 C2 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 Telegram, Chrome, Opera, Skype \u0438 \u0434\u0440. \n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e Telegram - \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 XCSSET \u043a\u0440\u0430\u0434\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0439\u0442\u0438 \u043f\u043e\u0434 \u043d\u0435\u0439 \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u043c\u0430\u0448\u0438\u043d\u044b, \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u043f\u0430\u043f\u043a\u0443.\n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b.", "url": "https://t.me/true_secator/1940"}, {"timestamp": "2021-09-08T00:00:00Z", "date_only": false, "value": "2021-09-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-09-08T14:49:34Z", "date_only": false, "value": "2021-09-08T14:49:34.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-30657", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-09-08T14:49:34Z", "date_only": false, "value": "2021-09-08T14:49:34.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "cve-2021-30657", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-09-08T15:15:00Z", "date_only": false, "value": "2021-09-08T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4F6H-9VP6-5P6R", "record": "GHSA-4F6H-9VP6-5P6R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-09-08T15:15:00Z", "date_only": false, "value": "2021-09-08T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-30657", "record": "GSD-2021-30657", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-09-08T15:15:13.127Z", "date_only": false, "value": "2021-09-08T15:15:13.127000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-09-08T15:15:13.127Z", "date_only": false, "value": "2021-09-08T15:15:13.127", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-30657", "record": "FKIE_CVE-2021-30657", "field": "published"}, {"timestamp": "2021-09-21T15:29:00Z", "date_only": false, "value": "2021-09-21T15:29Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-30657", "record": "GSD-2021-30657", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-30657", "field": "timestamps.asserted_at", "uuid": "f5dc9a43-ea89-4d73-a122-637ae301dc0e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-30657", "field": "timestamps.asserted_at", "uuid": "ec4c4343-70be-4ead-ba90-6f0967ff4706", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-30657", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-30657", "record": "GSD-2021-30657", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-30657", "field": "evidence.0.details.added_date", "uuid": "ec4c4343-70be-4ead-ba90-6f0967ff4706", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-30657", "field": "evidence.0.details.date_added", "uuid": "f5dc9a43-ea89-4d73-a122-637ae301dc0e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-30657", "field": "timestamps.first_seen_at", "uuid": "f5dc9a43-ea89-4d73-a122-637ae301dc0e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-30657", "field": "timestamps.first_seen_at", "uuid": "ec4c4343-70be-4ead-ba90-6f0967ff4706", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-30657", "field": "status.status_updated_at", "uuid": "f5dc9a43-ea89-4d73-a122-637ae301dc0e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-30657", "field": "status.status_updated_at", "uuid": "ec4c4343-70be-4ead-ba90-6f0967ff4706", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-30657", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "8e217979-fb1a-4803-9038-22a6d9be3869"}, {"timestamp": "2021-11-08T19:38:55Z", "date_only": false, "value": "2021-11-08T19:38:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/828", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "713d3d02-12b8-4f30-b5ba-da2684b8d721", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA sample POC for CVE-2021-30657 affecting MacOS\nURL\uff1ahttps://github.com/shubham0d/CVE-2021-30657", "url": "https://t.me/GithubRedTeam/828"}, {"timestamp": "2021-11-08T19:50:38Z", "date_only": false, "value": "2021-11-08T19:50:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7959", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "57486c8e-ac89-4261-b4e5-3e211fd91608", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-30657: A vulnerability in\u00a0syspolicyd\u00a0allows specially crafted application bundle downloaded from internet to\nbypass foundational macOS security features such as File Quarantine, Gatekeeper, and Notarization.\nArmed with this capability attackers could hack macOS systems with a simple user (double)-click.\n\nhttps://github.com/shubham0d/CVE-2021-30657", "url": "https://t.me/cKure/7959"}, {"timestamp": "2021-11-10T09:32:12Z", "date_only": false, "value": "2021-11-10T09:32:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/407", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "2ab7035f-48c5-498e-9510-b977cd7ddccf", "content": "#Exploit for #CVE-2021-40449\nWin32k Elevation\nhttps://github.com/Kristal-g/CVE-2021-40449_poc\n\n#poc for #CVE-2021-36799\nETS5 Password Recovery\nhttps://github.com/robertguetzkow/ets5-password-recovery\n\nA sample #poc for #CVE-2021-30657\naffecting MacOS\nhttps://github.com/shubham0d/CVE-2021-30657\n\n#Exploitation code for #CVE-2021-40539\nZoho ManageEngine ADSelfService Plus\nhttps://github.com/synacktiv/CVE-2021-40539\n\nVMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE #CVE-2021-21985\nhttps://github.com/sknux/CVE-2021-21985_PoC", "url": "https://t.me/hacker_trick/407"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-30657", "field": "evidence.0.details.due_date", "uuid": "f5dc9a43-ea89-4d73-a122-637ae301dc0e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-30657", "record": "GSD-2021-30657", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "9191d82f-2285-4568-8901-875579e7e902"}, {"timestamp": "2022-05-24T19:13:30Z", "date_only": false, "value": "2022-05-24T19:13:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4F6H-9VP6-5P6R", "record": "GHSA-4F6H-9VP6-5P6R", "field": "published"}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-07-14T00:00:00Z", "date_only": false, "value": "2022-07-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-08-29T00:00:00Z", "date_only": false, "value": "2022-08-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-08-29T06:33:00Z", "date_only": false, "value": "2022-08-29T06:33:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-12-13T01:23:30.666Z", "date_only": false, "value": "2023-12-13T01:23:30.666890Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-30657", "record": "GSD-2021-30657", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T22:40:31.918Z", "date_only": false, "value": "2024-08-03T22:40:31.918Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-30657", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-04T14:50:01Z", "date_only": false, "value": "2024-10-04T14:50:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4708", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "f9f63f37-abeb-42d8-a286-b510311a235c", "content": "#exploit\nCVE-2021-30657:\nA vulnerability in\u00a0syspolicyd\u00a0allows specially crafted application bundle downloaded from internet to bypass foundational macOS security features: File Quarantine, Gatekeeper, Notarization. Armed with this capability attackers could hack macOS systems with a simple user (double)-click\nhttps://github.com/shubham0d/CVE-2021-30657", "url": "https://t.me/CyberSecurityTechnologies/4708"}, {"timestamp": "2024-12-24T20:24:43.614Z", "date_only": false, "value": "2024-12-24T20:24:43.614855Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971132", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "4daca8ce-93ec-4429-983a-81fa9daa4cef", "url": "https://feedsin.space/feed/CISAKevBot/items/2971132"}, {"timestamp": "2025-01-29T17:24:32.300Z", "date_only": false, "value": "2025-01-29T17:24:32.300037Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-30657", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T17:24:32.300Z", "date_only": false, "value": "2025-01-29T17:24:32.300037Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-30657", "record": "FKIE_CVE-2021-30657", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "1f6915d2-9502-41b0-be92-13177599b893"}, {"timestamp": "2025-02-23T02:09:54Z", "date_only": false, "value": "2025-02-23T02:09:54.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "fb4a6326-90de-42a5-b2f5-20d366b64f98"}, {"timestamp": "2025-02-23T04:10:37Z", "date_only": false, "value": "2025-02-23T04:10:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "7ce208b0-efa1-4b05-8403-b7aedef9e124"}, {"timestamp": "2025-10-21T23:25:34.280Z", "date_only": false, "value": "2025-10-21T23:25:34.280Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-30657", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:34.280Z", "date_only": false, "value": "2025-10-21T23:25:34.280Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-30657", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:19Z", "date_only": false, "value": "2025-10-22T00:32:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4F6H-9VP6-5P6R", "record": "GHSA-4F6H-9VP6-5P6R", "field": "modified"}, {"timestamp": "2025-10-23T14:53:58.133Z", "date_only": false, "value": "2025-10-23T14:53:58.133000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T12:57:27.740Z", "date_only": false, "value": "2025-11-18T12:57:27.740000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202109-1307", "record": "VAR-202109-1307", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:38.008Z", "date_only": false, "value": "2026-02-02T12:28:38.008568Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d28f28-abb2-460e-8f06-a3fb22c4b3d7", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "b72fdad4-6b4c-47e5-8ba0-29c38620b253", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d28f28-abb2-460e-8f06-a3fb22c4b3d7"}, {"timestamp": "2026-02-02T12:28:38.008Z", "date_only": false, "value": "2026-02-02T12:28:38.008568Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d28f28-abb2-460e-8f06-a3fb22c4b3d7", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "03d922f3-d17c-4ac8-ab7d-bcc349655eae", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d28f28-abb2-460e-8f06-a3fb22c4b3d7"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-30657", "field": "timestamps.recorded_at", "uuid": "f5dc9a43-ea89-4d73-a122-637ae301dc0e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T03:50:38.103Z", "date_only": false, "value": "2026-06-17T03:50:38.103", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-30657", "record": "FKIE_CVE-2021-30657", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:56.436Z", "date_only": false, "value": "2026-06-19T12:47:56.436049Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26284ca5-b38a-49e0-91ce-56c22c131453", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "9e177853-b08b-421e-a0e2-ac91337d56a0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26284ca5-b38a-49e0-91ce-56c22c131453"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-30657", "field": "timestamps.recorded_at", "uuid": "ec4c4343-70be-4ead-ba90-6f0967ff4706", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:23.144Z", "date_only": false, "value": "2026-06-23T11:13:23.144436Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ec4c4343-70be-4ead-ba90-6f0967ff4706", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "8ee4eb08-c043-4d9b-89bc-f7f3ed495ddc", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ec4c4343-70be-4ead-ba90-6f0967ff4706"}, {"timestamp": "2026-06-23T14:04:47.120Z", "date_only": false, "value": "2026-06-23T14:04:47.120205Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c98196a-5aa2-4180-b379-ec3c4f58f996", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "e6d0226d-8300-4f2e-a704-8997d37a5656", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c98196a-5aa2-4180-b379-ec3c4f58f996"}, {"timestamp": "2026-09-01T20:02:01.629Z", "date_only": false, "value": "2026-09-01T20:02:01.629832Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/36220", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "5b7cce28-ad43-4bb5-a5a8-5924555bab51", "url": "https://t.me/hacking_Attack/36220"}, {"timestamp": "2026-09-01T20:02:15.021Z", "date_only": false, "value": "2026-09-01T20:02:15.021676Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/27311", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "f86c4c07-c211-43d3-a11b-be2153395854", "url": "https://t.me/hacking_Attack/27311"}, {"timestamp": "2026-09-01T20:02:34.969Z", "date_only": false, "value": "2026-09-01T20:02:34.969693Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/13789", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "cfbc7af6-4a9e-4abc-947b-4760e122c498", "url": "https://t.me/hacking_Attack/13789"}, {"timestamp": "2026-09-01T20:02:35.017Z", "date_only": false, "value": "2026-09-01T20:02:35.017684Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/13807", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "38e46be5-a762-4ccc-bcca-6b3bd446b177", "url": "https://t.me/hacking_Attack/13807"}, {"timestamp": "2026-09-07T08:00:06.164Z", "date_only": false, "value": "2026-09-07T08:00:06.164808Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/27311", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "a242eab1-b2aa-44bf-aa67-889a6e6af738", "url": "https://t.me/hacking_Attack/27311"}, {"timestamp": "2026-09-08T02:00:05.811Z", "date_only": false, "value": "2026-09-08T02:00:05.811561Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/13807", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "e49ec652-32ab-4520-a328-69c63867bb56", "url": "https://t.me/hacking_Attack/13807"}, {"timestamp": "2026-09-08T02:00:05.860Z", "date_only": false, "value": "2026-09-08T02:00:05.860301Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/13789", "record": "CVE-2021-30657", "field": "creation_timestamp", "uuid": "2f914c6a-2ec2-42a4-8e21-dfda0dbba760", "url": "https://t.me/hacking_Attack/13789"}]}