VulnerabilityModified
CVE-2022-32834
An access issue was addressed with improvements to the sandbox.
MEDIUM 5.5EPSS 0.55%
Does this matter?
Lower severity and a low EPSS score (0.55%). Track it; it rarely justifies an emergency change on its own.
Description
An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to access sensitive user information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.55% probability · 44th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- apple/mac os x · apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213343Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213344Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213345Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213343Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213344Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213345Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.