CVE-2022-42821

EUVD-2022-45884 · Published Dec 15, 2022

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, macOS Ventura 13. An app may bypass Gatekeeper checks.

Technologies

Apple Macos

Weaknesses

CWE-693

CVSS scores

v3.15.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Execution Privilege Escalation Stealth Credential Access Discovery Impact

T1068Exploitation for Privilege Escalation T1040Network Sniffing T1083File and Directory Discovery T1565.002Transmitted Data Manipulation T1574.005Executable Installer File Permissions Weakness T1574.010Services File Permissions Weakness T1611Escape to Host

References

http://seclists.org/fulldisclosure/2022/Dec/24
http://seclists.org/fulldisclosure/2022/Dec/25
https://support.apple.com/en-us/HT213488
https://support.apple.com/en-us/HT213533
https://support.apple.com/en-us/HT213534

Potentially impacted assets

See if this affects your attack surface