High severity7.8NVD Advisory· Published May 26, 2022· Updated Jun 17, 2026

CVE-2022-26704

Description

A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./macOS Montereyllm-fuzzy
Range: <12.4
Apple Inc./macOSv5
Range: unspecified

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2022/Jul/13nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Jul/14nvdMailing ListThird Party Advisory
github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0032/MNDT-2022-0032.mdnvdTechnical DescriptionThird Party Advisory
support.apple.com/en-us/HT213257nvdRelease NotesVendor Advisory
support.apple.com/kb/HT213344nvdVendor Advisory
support.apple.com/kb/HT213343nvdMailing List

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000