CVE-2022-26691: High severity apple macos vulnerability

Published Mar 14, 2022
·
Updated

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

Other sources

Apple macOS Monterey and macOS Big Sur could allow a local authenticated attacker to gain elevated privileges on the system, caused by a logic issue in the CUPS component. By using a specially-crafted application, an authenticated attacker could exploit this vulnerability to gain elevated privileges.

IBM

CUPS. A logic issue was addressed with improved state management.

Credit

Joshua Mason(Mandiant)

Affected Software

29 affected componentsFixes available
debian/cups
2.2.10-6+deb10u62.2.10-6+deb10u92.3.3op2-3+deb11u62.3.3op2-3+deb11u22.4.2-3+deb12u42.4.7-1
Apple macOS Big Sur<11.6.5
11.6.5
Apple Catalina
Apple macOS Monterey<12.3
12.3
IBM QRadar SIEM<=7.5 - 7.5.0 UP8 IF01
Apple CUPS<499.4
Apple iOS and macOS>=10.15<10.15.7
Apple iOS and macOS=10.15.7
Apple iOS and macOS=10.15.7-security_update_2020
Apple iOS and macOS=10.15.7-security_update_2020-001
Apple iOS and macOS=10.15.7-security_update_2020-005
Apple iOS and macOS=10.15.7-security_update_2020-007
Apple iOS and macOS=10.15.7-security_update_2021-001
Apple iOS and macOS=10.15.7-security_update_2021-002
Apple iOS and macOS=10.15.7-security_update_2021-003
Apple iOS and macOS=10.15.7-security_update_2021-006
Apple iOS and macOS=10.15.7-security_update_2021-007
Apple iOS and macOS=10.15.7-security_update_2021-008
Apple iOS and macOS=10.15.7-security_update_2022-001
Apple iOS and macOS=10.15.7-security_update_2022-002
Apple iOS and macOS=10.15.7-supplemental_update
Apple macOS>=11.0<11.6.5
Apple macOS>12.0.0<12.3
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Fedoraproject Fedora=35
Fedoraproject Fedora=36
OpenPrinting CUPS<2.4.2

Event History

May 26, 2022
CVE Published
via MITRE·05:47 PM
Data Sourced
via MITRE·05:47 PM
DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-26691?

The severity of CVE-2022-26691 is high.

2

How does CVE-2022-26691 affect macOS Big Sur?

CVE-2022-26691 affects macOS Big Sur 11.6.5 and below.

3

Is there a fix available for CVE-2022-26691?

Yes, the fix for CVE-2022-26691 is included in Security Update 2022-003 Catalina, macOS Monterey 12.3, and macOS Big Sur 11.6.5.

4

How can an application gain elevated privileges through CVE-2022-26691?

An application may be able to gain elevated privileges through CVE-2022-26691.

5

Where can I find more information about CVE-2022-26691?

More information about CVE-2022-26691 can be found at the following references: [Link 1](https://support.apple.com/en-us/HT213184), [Link 2](https://support.apple.com/en-us/HT213183), [Link 3](https://support.apple.com/en-us/HT213185).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203