CVE-2022-26704

2022-05-2618:43:32

apple

www.cve.org

cve-2022-26704

validation issue

symlinks

elevated privileges

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

36.1%

JSON

A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

CNA Affected

[
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "12.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]