Lucene search

PRIOn knowledge basePRION:CVE-2022-26701

HistoryMay 26, 2022 - 7:15 p.m.

Race condition

2022-05-2619:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.5%

JSON

A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

CPENameOperatorVersion
ipadoslt15.5
iphone_oslt15.5
macosge11.0
macoslt11.6.6
macosge12.0.0
macoslt12.4
tvoslt15.4

Name	Operator	Version
ipados	lt	15.5
iphone_os	lt	15.5
macos	ge	11.0
macos	lt	11.6.6
macos	ge	12.0.0
macos	lt	12.4
tvos	lt	15.4

References

support.apple.com/en-us/HT213254

support.apple.com/en-us/HT213257

support.apple.com/en-us/HT213258

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.5%

JSON

Related for PRION:CVE-2022-26701