CVE-2022-22583: Medium severity apple macos vulnerability

Q: What is CVE-2022-22583?

CVE-2022-22583 is a vulnerability related to a permissions issue in PackageKit that allows an application to access restricted files.

Q: What is the severity of CVE-2022-22583?

CVE-2022-22583 has a severity rating of medium (5.5).

Q: Which software versions are affected by CVE-2022-22583?

CVE-2022-22583 affects macOS Monterey 12.2, macOS Big Sur 11.6.3, and Catalina.

Q: How can I fix CVE-2022-22583?

To fix CVE-2022-22583, update your macOS to Security Update 2022-001 Catalina, macOS Monterey 12.2, or macOS Big Sur 11.6.3.

Q: Where can I find more information about CVE-2022-22583?

You can find more information about CVE-2022-22583 in the following Apple support articles: [link 1](https://support.apple.com/en-us/HT213054), [link 2](https://support.apple.com/en-us/HT213055), [link 3](https://support.apple.com/en-us/HT213056).

Published Jan 26, 2022

Updated

A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files.

Other sources

PackageKit. A permissions issue was addressed with improved validation.

Credit

Ron Hass@@ronhass7(Perception Point), Mickey Jin@@patch1t

Affected Software

16 affected componentsFixes available

Apple macOS Big Sur<11.6.3

11.6.3

Apple Catalina

Apple macOS Monterey<12.2

12.2

Apple iOS and macOS>=10.15<10.15.7

Apple iOS and macOS=10.15.7-security_update_2020-001

Apple iOS and macOS=10.15.7-security_update_2021-001

Apple iOS and macOS=10.15.7-security_update_2021-002

Apple iOS and macOS=10.15.7-security_update_2021-003

Apple iOS and macOS=10.15.7-security_update_2021-004

Apple iOS and macOS=10.15.7-security_update_2021-005

Apple iOS and macOS=10.15.7-security_update_2021-006

Apple iOS and macOS=10.15.7-security_update_2021-007

Apple iOS and macOS=10.15.7-security_update_2021-008

Apple macOS<11.6.3

Apple macOS>=12.0.0<12.3

Apple macOS=10.15.7

Event History

Mar 18, 2022

CVE Published

via MITRE·05:59 PM

Data Sourced

via MITRE·05:59 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2022-22583?

CVE-2022-22583 is a vulnerability related to a permissions issue in PackageKit that allows an application to access restricted files.

What is the severity of CVE-2022-22583?