← Back

CVE-2022-22650

nvd nist
Published: Mar 18, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data.

Affected (6)

Products: Apple: Mac Os X, Macos
Apple
2 products
Mac Os X
Macos
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Mac Os X
From 10.15 to 10.15.7
Mac Os X
Version 10.15.7 security_update_2022-001
Mac Os X
Version 10.15.7 security_update_2022-002
Apple
Macos
From 11.6 to 11.6.5
Macos
From 12.0 to 12.3
Macos
Version 10.15.7

Related CWEs

CWE-281
Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (6)

Source: product-security@apple.com
Vendor Advisory
Source: product-security@apple.com
Vendor Advisory
Source: product-security@apple.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.