PT-2022-26579

CVE-2022-42788

Published

2022-10-24

Updated

2025-05-05

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13

Description A permissions issue existed, allowing a malicious application to potentially read sensitive location information. This issue was addressed with improved permission validation.

Recommendations For versions prior to 13, update to macOS Ventura 13 to resolve the issue. As a temporary workaround, consider restricting access to sensitive location information until the update is applied.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-863: Incorrect Authorization