CVE-2022-22583
First published: Wed Jan 26 2022(Updated: )
A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files.
Credit: Ron Hass @ronhass7 Perception PointMickey Jin @patch1t Ron Hass @ronhass7 Perception PointMickey Jin @patch1t Ron Hass @ronhass7 Perception PointMickey Jin @patch1t product-security@apple.com product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Big Sur | <11.6.3 | 11.6.3 |
| Apple Catalina | ||
| Apple macOS Monterey | <12.2 | 12.2 |
| Apple Mac OS X | >=10.15<10.15.7 | |
| Apple Mac OS X | =10.15.7-security_update_2020-001 | |
| Apple Mac OS X | =10.15.7-security_update_2021-001 | |
| Apple Mac OS X | =10.15.7-security_update_2021-002 | |
| Apple Mac OS X | =10.15.7-security_update_2021-003 | |
| Apple Mac OS X | =10.15.7-security_update_2021-004 | |
| Apple Mac OS X | =10.15.7-security_update_2021-005 | |
| Apple Mac OS X | =10.15.7-security_update_2021-006 | |
| Apple Mac OS X | =10.15.7-security_update_2021-007 | |
| Apple Mac OS X | =10.15.7-security_update_2021-008 | |
| Apple macOS | <11.6.3 | |
| Apple macOS | >=12.0.0<12.3 | |
| Apple macOS | =10.15.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT213056 (Advisory)
- https://support.apple.com/en-us/HT213054 (Advisory)
- https://support.apple.com/en-us/HT213055 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is CVE-2022-22583?
CVE-2022-22583 is a vulnerability related to a permissions issue in PackageKit that allows an application to access restricted files.
What is the severity of CVE-2022-22583?
CVE-2022-22583 has a severity rating of medium (5.5).
Which software versions are affected by CVE-2022-22583?
CVE-2022-22583 affects macOS Monterey 12.2, macOS Big Sur 11.6.3, and Catalina.
How can I fix CVE-2022-22583?
To fix CVE-2022-22583, update your macOS to Security Update 2022-001 Catalina, macOS Monterey 12.2, or macOS Big Sur 11.6.3.
Where can I find more information about CVE-2022-22583?
You can find more information about CVE-2022-22583 in the following Apple support articles: [link 1](https://support.apple.com/en-us/HT213054), [link 2](https://support.apple.com/en-us/HT213055), [link 3](https://support.apple.com/en-us/HT213056).
- collector/apple-support
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/first-publish-date
- agent/softwarecombine
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/type
- agent/description
- agent/event
- agent/tags
- agent/trending
- vendor/apple
- canonical/apple catalina
- canonical/apple macos monterey
- canonical/apple mac os x
- version/apple mac os x/10.15
- version/apple mac os x/10.15.7-security_update_2020-001
- version/apple mac os x/10.15.7-security_update_2021-001
- version/apple mac os x/10.15.7-security_update_2021-002
- version/apple mac os x/10.15.7-security_update_2021-003
- version/apple mac os x/10.15.7-security_update_2021-004
- version/apple mac os x/10.15.7-security_update_2021-005
- version/apple mac os x/10.15.7-security_update_2021-006
- version/apple mac os x/10.15.7-security_update_2021-007
- version/apple mac os x/10.15.7-security_update_2021-008
- canonical/apple macos
- version/apple macos/12.0.0
- version/apple macos/10.15.7
- canonical/apple macos big sur