Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv3

CVE-2022-26726

Published: 26/05/2022 Updated: 07/06/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 384
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Apple

Vulnerability Summary

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x

apple mac os x 10.15.7

apple macos

apple watchos

Vendor Advisories

Apple: macOS Monterey 12.4
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security updates page Apple security documents reference vulnerabilities by CVE-ID&nbsp ...
Apple: watchOS 8.6
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security updates page Apple security documents reference vulnerabilities by CVE-ID&nbsp ...

Github Repositories

https://github.com/acheong08/CVE-2022-26726-POC

TCC Bypass

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability The versions I have tested so far are MacOS 1231, MacOS 123, MacOS 120, MacOS 10157, and MacOS 1161 The vulnerability works on all the versions tested on So what is the bug? Impact: A malicious application may be able to bypass certain Privacy prefer

https://github.com/acheong08/MSF-screenrecord-on-MacOS

TCC Bypass

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability The versions I have tested so far are MacOS 1231, MacOS 123, MacOS 120, MacOS 10157, and MacOS 1161 The vulnerability works on all the versions tested on So what is the bug? Impact: A malicious application may be able to bypass certain Privacy prefer

References

NVD-CWE-noinfohttps://support.apple.com/en-us/HT213256https://support.apple.com/en-us/HT213257https://support.apple.com/en-us/HT213255https://support.apple.com/en-us/HT213253https://nvd.nist.govhttps://github.com/acheong08/CVE-2022-26726-POChttps://support.apple.com/kb/HT213257
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook