Lucene search
AppleCVE-2022-32902HistoryFeb 27, 2023 - 8:15 p.m.
CVE-2022-32902
2023-02-2720:15:12
apple
web.nvd.nist.gov
72
4
cve-2022-32902
macos
ventura
monterey
big sur
privacy preferences
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
4.5
Confidence
High
EPSS
0
Percentile
15.7%
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences.
Affected configurations
Node
applemacosRange11.0–11.7
ORapplemacosRange12.0.0–12.6
CNA Affected
[
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "unspecified",
"lessThan": "13",
"status": "affected",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "unspecified",
"lessThan": "11.7",
"status": "affected",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "unspecified",
"lessThan": "12.6",
"status": "affected",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
cvelist
cvelist
CVE-2022-32902
2023-02-27 00:00:00
nvd
nvd
CVE-2022-32902
2023-02-27 20:15:12
prion
prion
Authentication flaw
2023-02-27 20:15:00
openvas
openvas
Apple Mac OS X Security Update (HT213444)
2022-09-13 00:00:00
Apple Mac OS X Security Update (HT213443)
2022-09-13 00:00:00
Apple Mac OS X Security Update (HT213488)
2023-07-25 00:00:00
nessus
nessus
macOS 11.x < 11.7 (HT213443)
2022-09-15 00:00:00
macOS 12.x < 12.6 Multiple Vulnerabilities (HT213444)
2022-09-15 00:00:00
apple
apple
About the security content of macOS Big Sur 11.7
2022-09-12 00:00:00
About the security content of macOS Monterey 12.6
2022-09-12 00:00:00
About the security content of macOS Ventura 13
2022-10-24 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
4.5
Confidence
High
EPSS
0
Percentile
15.7%
Related for CVE-2022-32902