A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-26691
• https://support.apple.com/en-us/HT213183
• https://support.apple.com/en-us/HT213184
• https://support.apple.com/en-us/HT213185
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.md
• https://lists.debian.org/debian-lts-announce/2022/05/msg00039.html
• https://www.debian.org/security/2022/dsa-5149
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U/
• OpenPrinting/cups@de4f8c1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO/