Loading vulnerability…
Symlink Validation Privilege Escalation in macOS Monterey
CVE-2022-26704 is an improper symlink-validation vulnerability in macOS Monterey. Insufficient validation when handling symbolic links could allow an application to gain elevated privileges. The issue was corrected by improving symlink validation in macOS Monterey 12.4.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
A successful exploit may allow an application to gain elevated privileges on the affected system.
If you can’t patch tonight, do this now.
Restrict execution of untrusted applications and monitor for suspicious symlink creation or manipulation until the system is updated.
Patch, then assume compromise.
Update to macOS Monterey 12.4 or a later security-supported macOS release containing the improved symlink validation.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.