CVE-2022-22585: High severity apple macos vulnerability
iCloud. An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization.
Other sources
An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files.
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-22585?
CVE-2022-22585 is a vulnerability that existed within the path validation logic for symlinks in iCloud which has been addressed with improved path sanitization.
Which software versions are affected by CVE-2022-22585?
CVE-2022-22585 affects Apple iOS up to version 15.3, Apple iPadOS up to version 15.3, Apple tvOS up to version 15.3, Apple macOS Monterey up to version 12.2, Apple macOS Big Sur up to version 11.6.3, and Apple watchOS up to version 8.4.
How can I fix CVE-2022-22585?
To fix CVE-2022-22585, it is recommended to update your affected software to the latest versions provided by Apple.
Where can I find more information about CVE-2022-22585?
You can find more information about CVE-2022-22585 on the official Apple support page with the reference links: [https://support.apple.com/en-us/HT213054](https://support.apple.com/en-us/HT213054), [https://support.apple.com/en-us/HT213053](https://support.apple.com/en-us/HT213053), [https://support.apple.com/en-us/HT213055](https://support.apple.com/en-us/HT213055).