CVE-2022-32900

HIGH

macOS 11.0-11.7 - Privilege Escalation via Logic Issue

Title source: llm

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to gain elevated privileges.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213443

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213444

Scores

CVSS v3 7.8

EPSS 0.0005

EPSS Percentile 16.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-269

Status published

Products (1)

apple/macos 11.0 - 11.7

Published Feb 27, 2023

Tracked Since Feb 18, 2026