PT-2022-18017 · Apple · Apple Macos

Joshua Mason · Published 2022-05-16 · Updated 2023-10-31 · CVE-2022-26704

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.4

Description A validation issue existed in the handling of symlinks, which has been addressed with improved validation of symlinks. This issue may allow an app to gain elevated privileges.

Recommendations For versions prior to 12.4, update to macOS Monterey 12.4 to resolve the issue. As a temporary workaround, consider restricting the use of symlinks to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2022-26704

Affected Products

Apple Macos

References · 14

• https://osv.dev/vulnerability/CVE-2022-26704 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26704 · Security Note
• https://support.apple.com/en-us/HT213257 · Vendor Advisory
• https://support.apple.com/kb/HT213344 · Vendor Advisory
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0032/MNDT-2022-0032.md · Note
• http://seclists.org/fulldisclosure/2022/Jul/13 · Note
• https://support.apple.com/en-us/HT213344 · Note
• https://support.apple.com/en-us/102872 · Note
• https://support.apple.com/kb/HT213343 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26704 · Note
• https://twitter.com/gergely_kalman/status/1719520057259077945 · Twitter Post
• https://support.apple.com/en-us/102871 · Note
• http://seclists.org/fulldisclosure/2022/Jul/14 · Note
• https://t.me/cvenotify/33582 · Telegram Post