vulnerability
OS X update for PackageKit (CVE-2022-26688)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:N/C:N/I:C/A:N) | May 26, 2022 | May 26, 2022 | Aug 13, 2025 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:C/A:N)
Published
May 26, 2022
Added
May 26, 2022
Modified
Aug 13, 2025
Description
An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files.
Solutions
apple-osx-security-update-2022-003-catalinaapple-osx-upgrade-11_6_5apple-osx-upgrade-12_3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.