CVE-2022-22616

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

Affected

Apple · macOS

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

8.05% chance of exploitation in the next 30 days, 95th percentile

Published

2022-05-26

Updated

2024-08-03

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/osx_gatekeeper_bypas…

Security advisories

• https://support.apple.com/en-us/HT213183
• https://support.apple.com/en-us/HT213184
• https://support.apple.com/en-us/HT213185

References

• CVE Record
• NVD entry