VulnerabilityModified
CVE-2022-22663
This issue was addressed with improved checks to prevent unauthorized actions.
MEDIUM 5.5EPSS 0.98%
Does this matter?
Lower severity and a low EPSS score (0.98%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.98% probability · 60th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/mac os x · apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213182Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213183Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213255Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213256Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213182Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213183Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213255Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213256Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.