Privilege Escalation Vulnerability in Xcode by Apple
CVE-2022-26747

7.8HIGH

Key Information:

Vendor

Apple
Status
Xcode
Vendor
CVE Published:
26 May 2022

What is CVE-2022-26747?

A privilege escalation issue exists in Xcode that may allow an app to gain elevated privileges. This vulnerability was addressed with improved checks in Xcode 13.4, ensuring enhanced security for applications developed using this tool. Users are encouraged to update to the latest version to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Xcode < 13.4

References

https://support.apple.com/en-us/HT213261
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.