CVE-2022-26691: apple cups +5 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2022-26691

CVSS 6.7 · Medium EPSS 0,60%

Kerentanan Incorrect Comparison pada apple cups, apple mac os x +4 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

Rincian

Terbit di NVD: 26 Mei 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-697: Incorrect Comparison
EPSS (30 hari): 0,60% peluang dieksploitasi; lebih tinggi dari 47,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
apple	cups	Semua versi sebelum 499.4
apple	mac os x	Versi 10.15 hingga sebelum 10.15.7
apple	mac os x	Versi 10.15.7
apple	mac os x	Versi 10.15.7 security_update_2020
apple	mac os x	Versi 10.15.7 security_update_2020-001
apple	mac os x	Versi 10.15.7 security_update_2020-005
apple	mac os x	Versi 10.15.7 security_update_2020-007
apple	mac os x	Versi 10.15.7 security_update_2021-001
apple	mac os x	Versi 10.15.7 security_update_2021-002
apple	mac os x	Versi 10.15.7 security_update_2021-003
apple	mac os x	Versi 10.15.7 security_update_2021-006
apple	mac os x	Versi 10.15.7 security_update_2021-007
apple	mac os x	Versi 10.15.7 security_update_2021-008
apple	mac os x	Versi 10.15.7 security_update_2022-001
apple	mac os x	Versi 10.15.7 security_update_2022-002
apple	mac os x	Versi 10.15.7 supplemental_update
apple	macos	Versi 11.0 hingga sebelum 11.6.5
apple	macos	Versi sesudah 12.0.0 hingga sebelum 12.3
debian	debian linux	Versi 9.0
debian	debian linux	Versi 10.0
debian	debian linux	Versi 11.0
fedoraproject	fedora	Versi 35
fedoraproject	fedora	Versi 36
openprinting	cups	Semua versi sebelum 2.4.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.apple.com/en-us/HT213183 release notes · advisory vendor
https://support.apple.com/en-us/HT213184 release notes · advisory vendor
https://support.apple.com/en-us/HT213185 release notes · advisory vendor
https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444 patch · advisory pihak ketiga
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.md advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2022/05/msg00039.html mailing list · advisory pihak ketiga
https://www.debian.org/security/2022/dsa-5149 advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITP...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M...

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.