CVE-2022-32207: apple macos Business Logic Errors
Vulnerability summary
CVE-2022-32207 is a critical (CVSS 9.8) Business Logic Errors vulnerability in apple macos. EPSS estimates a 12.32% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 7 · Related 3Timeline
- 07-07-2022PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
12.32%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
+5.00 pp
From 7.32% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (hackerone.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-840Business Logic ErrorsWeaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate use of the application's functionality. However, many business logic errors can exhibit patterns that are similar to well-understood implementation and design weaknesses.
- CWE-276Incorrect Default PermissionsDuring installation, installed file permissions are set to allow anyone to modify those files.
Affected systems
Netapp9 products
Debian2 products
- curl< 7.84.0-1
- debian_linuxEOL11.0
Alpine1 product
- curl≥ 7.69.0, < 7.79.1-r2 | ≥ 7.69.0, < 7.80.0-r2 | ≥ 7.69.0, < 7.83.1-r2 | ≥ 7.69.0, < 7.84.0-r0
Apple1 product
- macos< 13.0
Fedoraproject1 product
- fedoraEOL35
Haxx1 product
- curl≥ 7.69.0, < 7.84.0
Splunk1 product
- universal_forwarder≥ 8.2.0, < 8.2.12 | ≥ 9.0.0, < 9.0.6 | 9.1.0
Ubuntu1 product
- curl< 7.81.0-1ubuntu1.3
8 vendors · 17 products
References
20 links
- security.netapp.com/advisory/ntap-20220915-0003/Third Party Advisory
- support.apple.com/kb/HT213488Third Party Advisory
