Lucene search

K
cve[email protected]CVE-2022-48683
HistoryJun 10, 2024 - 8:15 p.m.

CVE-2022-48683

2024-06-1020:15:12
web.nvd.nist.gov
28
access issue
sandbox restrictions
macos ventura 13
app security

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.7%

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox.

Affected configurations

NVD
Node
applemacosRange<13.0
CPENameOperatorVersion
apple:macosapple macoslt13.0

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "13",
        "versionType": "custom"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.7%

Related for CVE-2022-48683