5.5

CVE-2022-42860

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected parts of the file system
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS Version >= 11.0.0 < 11.7.1
Apple ≫ macOS Version >= 12.0.0 < 12.6.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.051
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://support.apple.com/en-us/HT213488
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213493
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213494
Vendor Advisory
Release Notes