Objective-See's Blog OSX.CDDS (OSX.MacMa)
objective-see.org · Undated · Licence: not cleared; local research copy only
CVEs this report names
2 CVEs- CVE-2021-1789Apple Multiple Products Type Confusion VulnerabilityApple · Multiple ProductsKEVHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter1 report14.0%Top 3.5%67.3priority
- CVE-2021-30869Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityApple · iOS, iPadOS, and macOSKEVHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report4.1%Top 9.2%65.5priority
Where it names them
CVE-2021-1789 Original (opens in a new tab) ↗
A webkit “n-day” RCE (patched as CVE-2021-1789 in January)
CVE-2021-30869 Original (opens in a new tab) ↗
An XNU 0-day local privilege escalation (now patched as CVE-2021-30869).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.