CVE-2022-32862

Vulnerability

CVE-2022-32862 is a data protection bypass in macOS that allows an app with root privileges to access private information. The issue exists in macOS Big Sur before 11.7.1, macOS Monterey before 12.6.1, and macOS Ventura before 13. Apple addressed the vulnerability with improved data protection in the respective updates [1][2][3].

Exploitation

An attacker must already have root-level access on the system, either through a separate compromise or by running a malicious app that escalates to root. No additional user interaction is required beyond executing the privileged app. The exact exploitation steps are not publicly disclosed.

Impact

A successful exploit enables an attacker with root privileges to access private information that should be protected by macOS sandboxing or data protection mechanisms. This could lead to disclosure of sensitive user data, credentials, or system secrets, potentially facilitating further attacks.

Mitigation

Apple released fixes in macOS Big Sur 11.7.1, macOS Monterey 12.6.1, and macOS Ventura 13 on October 24, 2022 [1][2][3]. Users should update to the latest available version for their macOS release. No workarounds have been published.