CVE-2022-32782

MEDIUM

macOS 12.0-12.3 - Unprotected User Data Exposure via Hardened Runtime Bypass

Title source: llm

Description

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4. An app with root privileges may be able to access private information.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213257

Scores

CVSS v3 4.4

EPSS 0.0006

EPSS Percentile 17.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-269

Status published

Products (1)

apple/macos 12.0 - 12.4

Published Sep 23, 2022

Tracked Since Feb 18, 2026