What is CVE-2022-42834?

CVE-2022-42834 is a low-severity vulnerability in Apple macOS, classified under Files or Directories Accessible to External Parties. CVSS score: 3.3/10. Published 2023-06-23.

How severe is CVE-2022-42834?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Apple macOS

CVE-2022-42834

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used during compression

EPSS: 0.002 (14.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Apple Macos — versions unspecified

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

product-security@apple.com (Release Notes, Vendor Advisory)
product-security@apple.com (Release Notes, Vendor Advisory)
product-security@apple.com (Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2022-42834?: CVE-2022-42834 is a low-severity vulnerability in Apple macOS, classified under Files or Directories Accessible to External Parties. CVSS score: 3.3/10. Published 2023-06-23.
How severe is CVE-2022-42834?: Low severity. CVSS v3 base score is 3.3 out of 10.