CVE-2022-22650

CVE Database · CVE-2022-22650

CVE-2022-22650

· MEDIUMModified

CVSS v3.1

5.5

EPSS

0.24%

Published

Mar 18, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-281

Affected Products (6)

apple · mac_os_x (up to 10.15.7)vulnerable

apple · mac_os_xvulnerable

apple · macos (up to 11.6.5)vulnerable

apple · macos (up to 12.3)vulnerable

apple · macosvulnerable

References (6)

https://support.apple.com/en-us/HT213183

Vendor Advisory

https://support.apple.com/en-us/HT213184

Vendor Advisory

https://support.apple.com/en-us/HT213185

Vendor Advisory

https://support.apple.com/en-us/HT213183

Vendor Advisory

https://support.apple.com/en-us/HT213184

Vendor Advisory

https://support.apple.com/en-us/HT213185

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs