Incorrect comparison in Apple macOS
Priority LOW 31CWE-697Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
Why it matters now
EPSS 0.00595 48th percentileScored 2026-11-07
Fix Fixed macOS (Apple): 12.3, 11.6, 2022Red Hat: 5 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Apple | macOS | before 12.3 | 12.3 | Patch available | CNA |
| Apple | macOS | before 11.6 | 11.6 | Patch available | CNA |
| Apple | macOS | before 2022 | 2022 | Patch available | CNA |
- macOS VendorApple Affected before 12.3 Fixed in 12.3 Patch available CNA
- macOS VendorApple Affected before 11.6 Fixed in 11.6 Patch available CNA
- macOS VendorApple Affected before 2022 Fixed in 2022 Patch available CNA
CPE configurations NVD · 23
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:* | before 499.4 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | 10.15 to before 10.15.7 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:* | 10.15.7 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:* | 10.15.7 security_update_2020 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:* | 10.15.7 security_update_2020-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:* | 10.15.7 security_update_2020-005 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:* | 10.15.7 security_update_2020-007 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:* | 10.15.7 security_update_2021-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:* | 10.15.7 security_update_2021-002 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:* | 10.15.7 security_update_2021-003 | Vulnerable | Apple |
- cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:* Versions before 499.4 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions 10.15 to before 10.15.7 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:* Versions 10.15.7 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:* Versions 10.15.7 security_update_2020 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:* Versions 10.15.7 security_update_2020-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:* Versions 10.15.7 security_update_2020-005 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:* Versions 10.15.7 security_update_2020-007 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:* Versions 10.15.7 security_update_2021-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:* Versions 10.15.7 security_update_2021-002 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:* Versions 10.15.7 security_update_2021-003 Vulnerable ·Apple
Show 13 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:* | 10.15.7 security_update_2021-006 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:* | 10.15.7 security_update_2021-007 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:* | 10.15.7 security_update_2021-008 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:* | 10.15.7 security_update_2022-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:* | 10.15.7 security_update_2022-002 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:* | 10.15.7 supplemental_update | Vulnerable | Apple |
| cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 11.0 to before 11.6.5; after 12.0.0, before 12.3 | Vulnerable | Apple |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Debian |
| cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* | 35 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* | 36 | Vulnerable | Fedoraproject |
| cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:* | before 2.4.2 | Vulnerable | OpenPrinting |
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:* Versions 10.15.7 security_update_2021-006 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:* Versions 10.15.7 security_update_2021-007 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:* Versions 10.15.7 security_update_2021-008 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:* Versions 10.15.7 security_update_2022-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:* Versions 10.15.7 security_update_2022-002 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:* Versions 10.15.7 supplemental_update Vulnerable ·Apple
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions 11.0 to before 11.6.5; after 12.0.0, before 12.3 Vulnerable ·Apple
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* Versions 35 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* Versions 36 Vulnerable ·Fedoraproject
- cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:* Versions before 2.4.2 Vulnerable ·OpenPrinting
Remediation
- Fix · CNA macOS (Apple) Fixed in 12.3
- Fix · CNA macOS (Apple) Fixed in 11.6
- Fix · CNA macOS (Apple) Fixed in 2022
Red Hat 5 advisories
- RHSA-2022:4990 Released 2022-06-15 · Red Hat rating Importantcups security update
- Red Hat Enterprise Linux AppStream (v. 9) cups-1:2.3.3op2-13.el9_0.1, cups-client-1:2.3.3op2-13.el9_0.1, cups-devel-1:2.3.3op2-13.el9_0.1 +4
- Red Hat Enterprise Linux BaseOS (v. 9) cups-1:2.3.3op2-13.el9_0.1, cups-libs-1:2.3.3op2-13.el9_0.1
- RHSA-2022:5056 Released 2022-06-15 · Red Hat rating Importantcups security and bug fix update
- Red Hat Enterprise Linux AppStream (v. 8) cups-1:2.2.6-45.el8_6.2, cups-client-1:2.2.6-45.el8_6.2, cups-devel-1:2.2.6-45.el8_6.2 +3
- Red Hat Enterprise Linux BaseOS (v. 8) cups-1:2.2.6-45.el8_6.2, cups-libs-1:2.2.6-45.el8_6.2
- RHSA-2022:5057 Released 2022-06-15 · Red Hat rating Importantcups security update
- Red Hat Enterprise Linux AppStream EUS (v.8.4) cups-1:2.2.6-38.el8_4.1, cups-client-1:2.2.6-38.el8_4.1, cups-devel-1:2.2.6-38.el8_4.1 +3
- Red Hat Enterprise Linux BaseOS EUS (v.8.4) cups-1:2.2.6-38.el8_4.1, cups-libs-1:2.2.6-38.el8_4.1
Show 2 more Red Hat advisories
- RHSA-2022:5055 Released 2022-06-15 · Red Hat rating Importantcups security update
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) cups-1:2.2.6-33.el8_2.1, cups-client-1:2.2.6-33.el8_2.1, cups-devel-1:2.2.6-33.el8_2.1 +3
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) cups-1:2.2.6-33.el8_2.1, cups-libs-1:2.2.6-33.el8_2.1
- RHSA-2022:5054 Released 2022-06-15 · Red Hat rating Importantcups security update
- Red Hat Enterprise Linux AppStream E4S (v. 8.1) cups-1:2.2.6-28.el8_1.1, cups-client-1:2.2.6-28.el8_1.1, cups-devel-1:2.2.6-28.el8_1.1 +3
- Red Hat Enterprise Linux BaseOS E4S (v. 8.1) cups-1:2.2.6-28.el8_1.1, cups-libs-1:2.2.6-28.el8_1.1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Apple macOS 11.6
28 records Highest priority Priority HIGH 1 HIGH, 3 MEDIUM, 24 LOW
Other records, highest priority first
- TI-2022-06936 Out-of-bounds read in Apple macOSPriority HIGH 82
- TI-2022-10025 Memory corruption in Apple macOSPriority MEDIUM 53
- TI-2022-09978 Out-of-bounds write in Apple macOSPriority MEDIUM 45
- Release ·
Apple macOS 12.3
8 records Highest priority Priority CRITICAL 1 CRITICAL, 1 HIGH, 6 LOW
Other records, highest priority first
- TI-2022-06937 Out-of-bounds write in Apple iOS and iPadOSPriority CRITICAL 93
- TI-2022-06936 Out-of-bounds read in Apple macOSPriority HIGH 82
- TI-2022-06934 Out-of-bounds write in Apple iOS and iPadOSPriority LOW 36
Show 1 more group
- Release ·
Apple macOS 2022
7 records Highest priority Priority HIGH 1 HIGH, 6 LOW
Other records, highest priority first
- TI-2022-06936 Out-of-bounds read in Apple macOSPriority HIGH 82
- TI-2022-06934 Out-of-bounds write in Apple iOS and iPadOSPriority LOW 36
- TI-2022-06882 Apple macOS: A maliciously crafted ZIP archive may bypass Gatekeeper checksPriority LOW 36
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2022:5056 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2022:4990 |
| Red Hat Enterprise Linux AppStream E4S (v. 8.1) | Fixed | RHSA-2022:5054 |
| Red Hat Enterprise Linux AppStream EUS (v. 8.2) | Fixed | RHSA-2022:5055 |
| Red Hat Enterprise Linux AppStream EUS (v.8.4) | Fixed | RHSA-2022:5057 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2022:5056 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2022:4990 |
| Red Hat Enterprise Linux BaseOS E4S (v. 8.1) | Fixed | RHSA-2022:5054 |
| Red Hat Enterprise Linux BaseOS EUS (v. 8.2) | Fixed | RHSA-2022:5055 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.4) | Fixed | RHSA-2022:5057 |
Not affected: 3 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Virtualization 4
Timeline
- 2026-10-02 Threatist record created from CVE-2022-26691
- 2026-10-03 Alias added: GHSA-h495-hfpg-xw55
References
Advisory 8
- https://support.apple.com/en-us/HT213183
- https://support.apple.com/en-us/HT213184
- https://support.apple.com/en-us/HT213185
- [debian-lts-announce] 20220527 [SECURITY] [DLA 3029-1] cups security update
- DSA-5149
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.md
- FEDORA-2022-09a89bc265
- FEDORA-2022-39e057bc6d
More Apple Cups vulnerabilities
- TI-2008-03486 The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote… CVSS 2.0HIGH 10.0
- TI-2008-00044 Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might… CVSS 2.0HIGH 10.0
- TI-2004-02026 CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which… CVSS 3.1CRITICAL 9.8
- TI-2010-02814 ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute… CVSS 3.1CRITICAL 9.8
- TI-2009-00903 The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly… CVSS 3.1HIGH 7.5
- TI-2008-04935 The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a… CVSS 2.0HIGH 10.0
Sources
- CVE-2022-26691 · CVE Program
- CVE-2022-26691 · NVD
- FIRST EPSS
- GHSA-h495-hfpg-xw55 · GitHub Advisory Database · CC BY 4.0
- CVE-2022-26691 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences