CVE-2022-22582

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2023-02-27

Last modified

2025-03-11

Weaknesses

CWE-59

Affected products

• Mac Os X (Apple)
• Macos (Apple)

References

• https://support.apple.com/en-us/HT213183
• https://support.apple.com/en-us/HT213184
• https://support.apple.com/en-us/HT213185