CVE-2022-42834

LOW

macOS 11.0-11.7.2 - Unprotected Mail Attachment Exposure via Temporary Compression Directory

Title source: llm

Description

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used during compression

References (3)

Core 3

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213488

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213603

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213604

Scores

CVSS v3 3.3

EPSS 0.0004

EPSS Percentile 12.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-552

Status published

Products (1)

apple/macos 11.0 - 11.7.3

Published Jun 23, 2023

Tracked Since Feb 18, 2026