medium4.4
CVE-2022-26688
An issue in the handling of symlinks was addressed with improved validation.
Impact
An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | from 10.15 before 10.15.7 Version 10.15.7 |
| Apple | Macos | from 11.0 before 11.6.5 from 12.0.0 before 12.3 |