First published: Mon Mar 14 2022(Updated: )
System Preferences. This issue was addressed with a new entitlement.
Credit: Guilherme Rambo Best Buddy Apps product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Monterey | <12.3 | 12.3 |
Apple macOS | >=12.0<12.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID is CVE-2022-22660.
The severity of CVE-2022-22660 is medium.
The affected software for CVE-2022-22660 is macOS Monterey version up to and exclusive of 12.3.
CVE-2022-22660 was fixed with a new entitlement that is included in macOS Monterey 12.3.
Yes, an app may be able to spoof system notifications and UI due to CVE-2022-22660.