This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Accelerateframework | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Apache | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Appkit | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Appleevents | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Applegraphicscontrol | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Applescript | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Assets | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Ats | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Audio | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Betaaccessutility | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Bom | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Corebluetooth | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | May 26, 2022 |
| Apple Osx Coretypes | — | Apply OS X security update 2022-004 CatalinaUpgrade macOS to the latest version | May 17, 2022 | May 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub