VulnerabilityModified
CVE-2022-22600
A malicious application may be able to bypass certain Privacy preferences.
MEDIUM 5.5EPSS 1.65%
Does this matter?
Lower severity and a low EPSS score (1.65%). Track it; it rarely justifies an emergency change on its own.
Description
The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 1.65% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213182Vendor Advisory
- https://support.apple.com/en-us/HT213183Vendor Advisory
- https://support.apple.com/en-us/HT213186Vendor Advisory
- https://support.apple.com/en-us/HT213193Vendor Advisory
- https://support.apple.com/en-us/HT213182Vendor Advisory
- https://support.apple.com/en-us/HT213183Vendor Advisory
- https://support.apple.com/en-us/HT213186Vendor Advisory
- https://support.apple.com/en-us/HT213193Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.