← back
CVE-2022-22585

CVE-2022-22585

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
exploitation probability
1.7%top 24% of all CVEs
observed exploitation
nono source reports it
An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files.
Affected products
Apple · iOS and iPadOSApple · macOSApple · tvOSApple · watchOS
References
https://support.apple.com/en-us/HT213053https://support.apple.com/en-us/HT213054https://support.apple.com/en-us/HT213055https://support.apple.com/en-us/HT213057https://support.apple.com/en-us/HT213059