CVE Vulnerabilities

CVE-2022-26746

Published: May 26, 2022 | Modified: Nov 21, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.

Affected Software

NameVendorStart VersionEnd Version
Mac_os_xApple*10.15.7 (excluding)
Mac_os_xApple10.15.7 (including)10.15.7 (including)
Mac_os_xApple10.15.7-security_update_2020-001 (including)10.15.7-security_update_2020-001 (including)
Mac_os_xApple10.15.7-security_update_2021-001 (including)10.15.7-security_update_2021-001 (including)
Mac_os_xApple10.15.7-security_update_2021-002 (including)10.15.7-security_update_2021-002 (including)
Mac_os_xApple10.15.7-security_update_2021-003 (including)10.15.7-security_update_2021-003 (including)
Mac_os_xApple10.15.7-security_update_2021-004 (including)10.15.7-security_update_2021-004 (including)
Mac_os_xApple10.15.7-security_update_2021-005 (including)10.15.7-security_update_2021-005 (including)
Mac_os_xApple10.15.7-security_update_2021-006 (including)10.15.7-security_update_2021-006 (including)
Mac_os_xApple10.15.7-security_update_2021-007 (including)10.15.7-security_update_2021-007 (including)
Mac_os_xApple10.15.7-security_update_2021-008 (including)10.15.7-security_update_2021-008 (including)
Mac_os_xApple10.15.7-security_update_2022-001 (including)10.15.7-security_update_2022-001 (including)
Mac_os_xApple10.15.7-security_update_2022-002 (including)10.15.7-security_update_2022-002 (including)
Mac_os_xApple10.15.7-security_update_2022-003 (including)10.15.7-security_update_2022-003 (including)
MacosApple11.0 (including)11.6.6 (excluding)
MacosApple12.0 (including)12.4 (excluding)

References