ID:7586 - Exploit for State Issues in macOS - CVE-2022-22639

 
Main Vulnerability Database Exploits ID:7586 - Exploit for State Issues in macOS - CVE-2022-22639

ID:7586 - Exploit for State Issues in macOS - CVE-2022-22639

Published: April 3, 2022


Vulnerability identifier: #VU61329
Vulnerability risk: Low
CVE-ID: CVE-2022-22639
CWE-ID: CWE-371
Exploitation vector: Local access
Vulnerable software:
macOS

Link to public exploit:


Vulnerability description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a state management issue within the SoftwareUpdate subsystem. A malicious application can execute arbitrary code with elevated privileges.


Remediation

Install updates from vendor's website.