VulnerabilityModified
CVE-2022-26691
A logic issue was addressed with improved state management.
MEDIUM 6.7EPSS 0.58%
Does this matter?
Lower severity and a low EPSS score (0.58%). Track it; it rarely justifies an emergency change on its own.
Description
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.58% probability · 46th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-697
- Affected
- apple/cups · apple/mac os x · apple/macos · debian/debian linux · fedoraproject/fedora · openprinting/cups
- Source
- product-security@apple.com
References
- https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444Patch, Third Party Advisory
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/05/msg00039.htmlMailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO/
- https://support.apple.com/en-us/HT213183Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213184Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213185Release Notes, Vendor Advisory
- https://www.debian.org/security/2022/dsa-5149Third Party Advisory
- https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444Patch, Third Party Advisory
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/05/msg00039.htmlMailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO/
- https://support.apple.com/en-us/HT213183Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213184Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213185Release Notes, Vendor Advisory
- https://www.debian.org/security/2022/dsa-5149Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.