CVE-2022-26704(apple / mac_os_x)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mac_os_x
  • macos

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
mac_os_xmacos

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-29: 110-29
Full discourse1 post
  • 川井佑一郎 【夢見る限界AIオタク】@y__fixer

    ④4年前の番号が1件だけ混ざっている 263件のうち262件は2026年に振られた番号です。 1件だけ CVE-2022-26704 という2022年の番号が入っていました。Spotlight(検索)で、アプリが権限を上げられるという内容です。 手元のMacが新しいことと、ふさがれた穴が新しいことは別だと分かる1件です。

    10001137
    1.1K followersView on X
CPE platform detail19 entries

19 of 19 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemac_os_x---
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemac_os_x10.15.7--
OSapplemacos---

Explore more