Medium severity4.4NVD Advisory· Published May 26, 2022· Updated Jun 17, 2026
CVE-2022-26688
CVE-2022-26688
Description
An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <=11.6.4, <=12.2
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=11.0,<11.6.5
- Range: = 2022-003
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*range: >=10.15,<10.15.7
- cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- support.apple.com/en-us/HT213183nvdRelease NotesVendor Advisory
- support.apple.com/en-us/HT213184nvdRelease NotesVendor Advisory
- support.apple.com/en-us/HT213185nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.