VulnerabilityModified
CVE-2022-22656
A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen.
LOW 3.3EPSS 0.26%
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.26% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- apple/mac os x · apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213183Vendor Advisory
- https://support.apple.com/en-us/HT213184Vendor Advisory
- https://support.apple.com/en-us/HT213185Vendor Advisory
- https://support.apple.com/en-us/HT213183Vendor Advisory
- https://support.apple.com/en-us/HT213184Vendor Advisory
- https://support.apple.com/en-us/HT213185Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.