CVE-2022-22585

Reference Links

• https://support.apple.com/en-us/HT213053 (Advisory)
• https://support.apple.com/en-us/HT213054 (Advisory)
• https://support.apple.com/en-us/HT213055 (Advisory)
• https://support.apple.com/en-us/HT213057 (Advisory)
• https://support.apple.com/en-us/HT213059 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• HT213054
• HT213055
• HT213059
• HT213057
• HT213053

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-22586
• CVE-2022-22584
• CVE-2022-22578
• CVE-2022-22585
• CVE-2022-22591
• CVE-2022-22587
• CVE-2022-22593
• CVE-2022-22579
• CVE-2022-22646
• CVE-2022-22676
• CVE-2022-22583
• CVE-2022-22589
• CVE-2022-22590
• CVE-2022-22592
• CVE-2022-22594
• CVE-2021-30960
• CVE-2021-30972

Frequently Asked Questions

• What is CVE-2022-22585?

  CVE-2022-22585 is a vulnerability that existed within the path validation logic for symlinks in iCloud which has been addressed with improved path sanitization.

• Which software versions are affected by CVE-2022-22585?

  CVE-2022-22585 affects Apple iOS up to version 15.3, Apple iPadOS up to version 15.3, Apple tvOS up to version 15.3, Apple macOS Monterey up to version 12.2, Apple macOS Big Sur up to version 11.6.3, and Apple watchOS up to version 8.4.

• How can I fix CVE-2022-22585?

  To fix CVE-2022-22585, it is recommended to update your affected software to the latest versions provided by Apple.

• Where can I find more information about CVE-2022-22585?

  You can find more information about CVE-2022-22585 on the official Apple support page with the reference links: [https://support.apple.com/en-us/HT213054](https://support.apple.com/en-us/HT213054), [https://support.apple.com/en-us/HT213053](https://support.apple.com/en-us/HT213053), [https://support.apple.com/en-us/HT213055](https://support.apple.com/en-us/HT213055).