Lucene search
HistoryNov 01, 2022 - 8:15 p.m.
CVE-2022-32794
logic issue
state management
security update
elevated privileges
macos catalina
macos monterey
macos big sur
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
26.4%
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to gain elevated privileges.
Affected configurations
Node
applemac_os_xRange10.15–10.15.7
ORapplemac_os_xMatch10.15.7-
ORapplemac_os_xMatch10.15.7security_update_2020
ORapplemac_os_xMatch10.15.7security_update_2020-001
ORapplemac_os_xMatch10.15.7security_update_2020-005
ORapplemac_os_xMatch10.15.7security_update_2020-007
ORapplemac_os_xMatch10.15.7security_update_2021-001
ORapplemac_os_xMatch10.15.7security_update_2021-002
ORapplemac_os_xMatch10.15.7security_update_2021-003
ORapplemac_os_xMatch10.15.7security_update_2021-004
ORapplemac_os_xMatch10.15.7security_update_2021-005
ORapplemac_os_xMatch10.15.7security_update_2021-006
ORapplemac_os_xMatch10.15.7security_update_2021-007
ORapplemac_os_xMatch10.15.7security_update_2021-008
ORapplemac_os_xMatch10.15.7security_update_2022-001
ORapplemac_os_xMatch10.15.7security_update_2022-002
ORapplemac_os_xMatch10.15.7security_update_2022-003
ORapplemac_os_xMatch10.15.7security_update_2022-004
ORapplemac_os_xMatch10.15.7supplemental_update
ORapplemacosRange11.0–11.6.6
ORapplemacosRange12.0.0–12.4
Related
cvelist
cvelist
CVE-2022-32794
2022-11-01 00:00:00
cve
cve
CVE-2022-32794
2022-11-01 20:15:17
prion
prion
Code injection
2022-11-01 20:15:00
apple
apple
About the security content of Security Update 2022-004 Catalina
2022-05-16 00:00:00
About the security content of macOS Big Sur 11.6.6
2022-05-16 00:00:00
About the security content of macOS Monterey 12.4
2022-05-16 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
26.4%
Related for NVD:CVE-2022-32794