CVE-2022-26704

7.8 highEPSS 1.1%

High (7.8) in apple. EPSS 1.1% chance of exploitation in the next 30 days.

A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2022-05-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:mac_os_x
apple:macos

References

http://seclists.org/fulldisclosure/2022/Jul/13
http://seclists.org/fulldisclosure/2022/Jul/14
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0032/MNDT-2022-0032.md
https://support.apple.com/en-us/HT213257
https://support.apple.com/kb/HT213343

Check your stack JSON