ID:7586 - Exploit for State Issues in macOS - CVE-2022-22639
Published: April 3, 2022
Vulnerability identifier: #VU61329
Vulnerability risk: Low
CVE-ID: CVE-2022-22639
CWE-ID: CWE-371
Exploitation vector: Local access
Vulnerable software:
macOS
macOS
Link to public exploit:
Vulnerability description
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a state management issue within the SoftwareUpdate subsystem. A malicious application can execute arbitrary code with elevated privileges.
Remediation
Install updates from vendor's website.