CVE-2022-26704
HIGH 7.8 ALL-YEARSA validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.
Severe if exploited (CVSS 7.8), but no confirmed exploitation. Patch on a normal cadence.
Exploitation likelihood
1.1%chance of exploitation in 30 days · 66th percentile
Impact if exploited
7.8CVSS 3.1 · HIGH · NVD
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityHigh
What an attacker needs
- ⚠Access: Requires local access to the host
- ✓Privileges: No account or privileges required
- ⚠User interaction: A user must take an action (click / open a file)
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Weakness (CWE)
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References and research data (JSON)
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Apple | Mac Os X | ≥ 10.15 and < 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Mac Os X | 10.15.7 |
| Apple | Macos | ≥ 11.0 and < 11.6.8 |
| Apple | Macos | ≥ 12.0.0 and < 12.4 |
All CVSS metrics
- HIGH 7.8 v3.1 · NVD Primary
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - MEDIUM 6.8 v2.0 · NVD Primary
AV:N/AC:M/Au:N/C:P/I:P/A:P
References
Advisories
- https://support.apple.com/en-us/HT213257 CVE record · apple · Updated 2022-07-29T23:09:43.000Z
CVE record · CVE · Updated 2024-08-03T05:11:44.045Z
NVD · CVE-2022-26704 · Updated 2026-06-17T04:35:39.660 - https://support.apple.com/kb/HT213344 CVE record · apple · Updated 2022-07-29T23:09:43.000Z
CVE record · CVE · Updated 2024-08-03T05:11:44.045Z
NVD · CVE-2022-26704 · Updated 2026-06-17T04:35:39.660 - http://seclists.org/fulldisclosure/2022/Jul/14 CVE record · apple · Updated 2022-07-29T23:09:43.000Z
CVE record · CVE · Updated 2024-08-03T05:11:44.045Z
NVD · CVE-2022-26704 · Updated 2026-06-17T04:35:39.660 - http://seclists.org/fulldisclosure/2022/Jul/13 CVE record · apple · Updated 2022-07-29T23:09:43.000Z
CVE record · CVE · Updated 2024-08-03T05:11:44.045Z
NVD · CVE-2022-26704 · Updated 2026-06-17T04:35:39.660 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0032/MNDT-2022-0032.md CVE record · apple · Updated 2022-07-29T23:09:43.000Z
CVE record · CVE · Updated 2024-08-03T05:11:44.045Z
NVD · CVE-2022-26704 · Updated 2026-06-17T04:35:39.660 - https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-31254 EUVD · EUVD-2022-31254
Technical & other
- https://support.apple.com/kb/HT213343 CVE record · apple · Updated 2022-07-29T23:09:43.000Z
CVE record · CVE · Updated 2024-08-03T05:11:44.045Z
NVD · CVE-2022-26704 · Updated 2026-06-17T04:35:39.660
Sources: NVD · CVE.org · All sources and attribution · EPSS