Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-26688

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple macOS

  • unspecified to < 12.3affected

Apple macOS

  • unspecified to < 11.6affected

Apple macOS

  • unspecified to < 2022affected

References