Improper Authorization in macOS - CVE-2022-48575
Published: November 6, 2023
Vulnerability identifier: #VU82719
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-48575
CWE-ID: CWE-285
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker to bypass the Login Window.
The vulnerability exists due to a consistency issue in the Login Windows. An attacker with physical access to device can bypass the login window and gain unauthorized access to the system.
Affected software
macOS
How to mitigate CVE-2022-48575
Install updates from vendor's website.
macOS - update to 12.4 21F79