Lucene search
HistoryNov 01, 2022 - 8:15 p.m.
CVE-2022-42789
code signature validation
macos big sur
macos ventura
macos monterey
user-sensitive data
cve-2022-42789
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.
Affected configurations
Node
applemacosRange11.0–11.7
ORapplemacosRange12.0–12.6
Related
cvelist
cvelist
CVE-2022-42789
2022-11-01 00:00:00
prion
prion
Code injection
2022-11-01 20:15:00
cve
cve
CVE-2022-42789
2022-11-01 20:15:22
apple
apple
About the security content of macOS Big Sur 11.7
2022-09-12 00:00:00
About the security content of macOS Monterey 12.6
2022-09-12 00:00:00
About the security content of macOS Ventura 13
2022-10-24 00:00:00
nessus
nessus
macOS 12.x < 12.6 Multiple Vulnerabilities (HT213444)
2022-09-15 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213488)
2023-07-25 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
Related for NVD:CVE-2022-42789