Vulnerabilities > CVE-2022-26767 - Incorrect Authorization vulnerability in Apple Macos

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

apple

CWE-863

NVD

Published: 2022-05-26

Updated: 2022-06-08

Summary

The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.

Vulnerable Configurations

Part	Description	Count
OS	Apple Apple Macos 11.0 Apple Macos 11.0.1 Apple Macos 11.1 Apple Macos 11.1.0 Apple Macos 11.2 Apple Macos 11.2.1 Apple Macos 11.3 Apple Macos 11.3.1 Apple Macos 11.4 Apple Macos 11.5 Apple Macos 11.6 Apple Macos 11.6.1 Apple Macos 12.0.0 Apple Macos 12.0.1 Apple Macos 12.1 Apple Macos 12.2 Apple Macos 12.2.1 Apple Macos 12.3	18

Common Weakness Enumeration (CWE)

CWE-863 - Incorrect Authorization

References

https://support.apple.com/en-us/HT213256
https://support.apple.com/en-us/HT213257