PT-2022-26580 · Apple · Macos Monterey+2

Koh M. Nakagawa · Published 2022-09-12 · Updated 2022-11-02 · CVE-2022-42789

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.7 macOS Monterey versions prior to 12.6 macOS Ventura version 13 is not affected, but versions prior to 13 are vulnerable, however since 13 is the starting version, it is already included in 'prior to' statement, hence the correct statement is: macOS versions prior to 11.7 macOS Monterey versions prior to 12.6

Description The issue concerns a problem in code signature validation that has been addressed with improved checks. This could allow an app to access user-sensitive data.

Recommendations For macOS versions prior to 11.7, update to macOS Big Sur 11.7 or later. For macOS Monterey versions prior to 12.6, update to macOS Monterey 12.6 or later.

Fix

Related Identifiers

CVE-2022-42789

Affected Products

Apple Macos

Macos Big Sur

Macos Monterey

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2022-42789 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42789 · Vendor Advisory
• https://support.apple.com/en-us/HT213488 · Vendor Advisory
• https://support.apple.com/en-us/HT213443 · Vendor Advisory
• https://support.apple.com/en-us/HT213444 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42789 · Note
• https://support.apple.com/en-us/102841 · Note
• https://support.apple.com/en-us/102840 · Note
• https://support.apple.com/en-us/102853 · Note