CVE-2022-32848 — Improper Access Control in Apple Macos

CWE-284 — Improper Access ControlCWE-89 — SQL Injection5 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 89.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple MacosApple Macos BIG SURApple Macos Monterey
Timeline
PublishedSep 23
Latest updateJan 14

Description

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to capture a user’s screen.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5apple/macosunspecified — 12.5+1
▶NVDapple/macos11.0 — 11.6.8+1
▶Appleapple/macos_big_sur11.6.8

🔴Vulnerability Details

1
GHSA
GHSA-qc73-wjpr-m8fj: A logic issue was addressed with improved checks↗2022-09-25
▶

📋Vendor Advisories

3
Ivanti
Ivanti Security Advisory: CVE-2024-13162↗2025-01-14
▶
Apple
CVE-2022-32848: macOS Monterey 12.5↗2022-07-20
▶
Apple
CVE-2022-32848: macOS Big Sur 11.6.8↗2022-07-20
▶