CVE-2022-48575

A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4.

CVSS v3 3.5 LOW

3.5^/10

CVSS v3 : LOW

Vector :

Exploitability : 0.9 / Impact : 2.5

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/213257	Broken Link
https://support.apple.com/en-us/102871	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

23 Jul 2026, 09:10

Type	Values Removed	Values Added
Summary		(es) Una persona con acceso a un Mac podría eludir la Ventana de inicio de sesión. Se abordó un problema de coherencia con una gestión de estados mejorada. Este problema está solucionado en macOS Monterey 12.4.

11 Jun 2026, 19:48

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/213257 -~~	() https://support.apple.com/en-us/213257 - Broken Link
References	~~() https://support.apple.com/en-us/102871 -~~	() https://support.apple.com/en-us/102871 - Release Notes, Vendor Advisory
CPE		cpe:2.3:o:apple:macos::::::::
First Time		Apple Apple macos

11 Jun 2026, 02:16

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 3.5
CWE		CWE-287
References		() https://support.apple.com/en-us/102871 -

10 Jun 2026, 22:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-10 22:16

Updated : 2026-07-23 09:10

NVD link : CVE-2022-48575

Mitre link : CVE-2022-48575

CVE.ORG link : CVE-2022-48575

JSON object : View

Products Affected

apple

macos

CWE

CWE-287

Improper Authentication

{"id": "CVE-2022-48575", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-48575", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-11T00:25:04.915924Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 0.9}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "macOS Monterey", "versions": [{"status": "affected", "version": "0", "lessThan": "12.4", "versionType": "custom"}]}]}], "published": "2026-06-10T22:16:52.603", "references": [{"url": "https://support.apple.com/en-us/213257", "tags": ["Broken Link"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/102871", "tags": ["Release Notes", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4."}, {"lang": "es", "value": "Una persona con acceso a un Mac podr\u00eda eludir la Ventana de inicio de sesi\u00f3n. Se abord\u00f3 un problema de coherencia con una gesti\u00f3n de estados mejorada. Este problema est\u00e1 solucionado en macOS Monterey 12.4."}], "lastModified": "2026-07-23T09:10:00.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C36C679E-478C-47A1-A3EC-77B1C472220C", "versionEndExcluding": "12.4"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}