high7.8
CVE-2022-26704
A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks.
Impact
A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | from 10.15 before 10.15.7 Version 10.15.7 |
| Apple | Macos | from 11.0 before 11.6.8 from 12.0.0 before 12.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2022/Jul/13
- http://seclists.org/fulldisclosure/2022/Jul/14
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0032/MNDT-2022-0032.md
- https://support.apple.com/en-us/HT213257
- https://support.apple.com/kb/HT213343
- https://support.apple.com/kb/HT213344
- http://seclists.org/fulldisclosure/2022/Jul/13
- http://seclists.org/fulldisclosure/2022/Jul/14
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0032/MNDT-2022-0032.md
- https://support.apple.com/en-us/HT213257
- https://support.apple.com/kb/HT213343
- https://support.apple.com/kb/HT213344