CVE-2022-42821

—

CVSS 3.1

5.5 medium

EPSS

4%p90

Published

Dec 15, 2022 (Dec 15, 2022)

Modified

Jun 17, 2026

Description

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, macOS Ventura 13. An app may bypass Gatekeeper checks.

Vendors: apple
Products: macos
Weakness: CWE-693
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news3 stories

Microsoft Details Critical Apple macOS Vulnerability Allowing SIP Protection Bypass

The Hacker NewsMay 31, 11:57 UTC · May 31, 2023Vulnerability CVE-2023-32369 CVE-2021-30892 CVE-2021-30970+2 CVEs

Microsoft shares details for a Gatekeeper Bypass bug in Apple macOS

Security AffairsDec 20, 15:49 UTC · Dec 20, 2022Exploit / PoC CVE-2022-42821

Microsoft Details Gatekeeper Bypass Vulnerability in Apple macOS Systems

The Hacker NewsDec 20, 12:10 UTC · Dec 20, 2022Vulnerability CVE-2022-42821