CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25366

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious .dylib file that can be executed via the DYLD_INSERT_LIBRARIES environment variable.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 18.1%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 4.6

References

Products affected by CVE-2022-25366

Cryptomator » Cryptomator » Version: 0.1.0

cpe:2.3:a:cryptomator:cryptomator:0.1.0
Cryptomator » Cryptomator » Version: 0.10.0

cpe:2.3:a:cryptomator:cryptomator:0.10.0
Cryptomator » Cryptomator » Version: 0.10.1

cpe:2.3:a:cryptomator:cryptomator:0.10.1
Cryptomator » Cryptomator » Version: 0.11.0

cpe:2.3:a:cryptomator:cryptomator:0.11.0
Cryptomator » Cryptomator » Version: 0.2.0

cpe:2.3:a:cryptomator:cryptomator:0.2.0
Cryptomator » Cryptomator » Version: 0.3.0

cpe:2.3:a:cryptomator:cryptomator:0.3.0
Cryptomator » Cryptomator » Version: 0.4.0

cpe:2.3:a:cryptomator:cryptomator:0.4.0
Cryptomator » Cryptomator » Version: 0.5.0

cpe:2.3:a:cryptomator:cryptomator:0.5.0
Cryptomator » Cryptomator » Version: 0.5.1

cpe:2.3:a:cryptomator:cryptomator:0.5.1
Cryptomator » Cryptomator » Version: 0.5.2

cpe:2.3:a:cryptomator:cryptomator:0.5.2
Cryptomator » Cryptomator » Version: 0.5.3

cpe:2.3:a:cryptomator:cryptomator:0.5.3
Cryptomator » Cryptomator » Version: 0.6.0

cpe:2.3:a:cryptomator:cryptomator:0.6.0
Cryptomator » Cryptomator » Version: 0.7.0

cpe:2.3:a:cryptomator:cryptomator:0.7.0
Cryptomator » Cryptomator » Version: 0.7.1

cpe:2.3:a:cryptomator:cryptomator:0.7.1
Cryptomator » Cryptomator » Version: 0.7.2

cpe:2.3:a:cryptomator:cryptomator:0.7.2
Cryptomator » Cryptomator » Version: 0.8.0

cpe:2.3:a:cryptomator:cryptomator:0.8.0
Cryptomator » Cryptomator » Version: 0.8.1

cpe:2.3:a:cryptomator:cryptomator:0.8.1
Cryptomator » Cryptomator » Version: 0.8.2

cpe:2.3:a:cryptomator:cryptomator:0.8.2
Cryptomator » Cryptomator » Version: 0.9.0

cpe:2.3:a:cryptomator:cryptomator:0.9.0
Cryptomator » Cryptomator » Version: 1.0.0

cpe:2.3:a:cryptomator:cryptomator:1.0.0
Cryptomator » Cryptomator » Version: 1.0.1

cpe:2.3:a:cryptomator:cryptomator:1.0.1
Cryptomator » Cryptomator » Version: 1.0.2

cpe:2.3:a:cryptomator:cryptomator:1.0.2
Cryptomator » Cryptomator » Version: 1.0.3

cpe:2.3:a:cryptomator:cryptomator:1.0.3
Cryptomator » Cryptomator » Version: 1.0.3b

cpe:2.3:a:cryptomator:cryptomator:1.0.3b
Cryptomator » Cryptomator » Version: 1.0.3c

cpe:2.3:a:cryptomator:cryptomator:1.0.3c
Cryptomator » Cryptomator » Version: 1.0.3d

cpe:2.3:a:cryptomator:cryptomator:1.0.3d
Cryptomator » Cryptomator » Version: 1.0.4

cpe:2.3:a:cryptomator:cryptomator:1.0.4
Cryptomator » Cryptomator » Version: 1.0.5

cpe:2.3:a:cryptomator:cryptomator:1.0.5
Cryptomator » Cryptomator » Version: 1.1.0

cpe:2.3:a:cryptomator:cryptomator:1.1.0
Cryptomator » Cryptomator » Version: 1.1.1

cpe:2.3:a:cryptomator:cryptomator:1.1.1
Cryptomator » Cryptomator » Version: 1.1.2

cpe:2.3:a:cryptomator:cryptomator:1.1.2
Cryptomator » Cryptomator » Version: 1.1.3

cpe:2.3:a:cryptomator:cryptomator:1.1.3
Cryptomator » Cryptomator » Version: 1.1.4

cpe:2.3:a:cryptomator:cryptomator:1.1.4
Cryptomator » Cryptomator » Version: 1.2.0

cpe:2.3:a:cryptomator:cryptomator:1.2.0
Cryptomator » Cryptomator » Version: 1.2.1

cpe:2.3:a:cryptomator:cryptomator:1.2.1
Cryptomator » Cryptomator » Version: 1.2.2

cpe:2.3:a:cryptomator:cryptomator:1.2.2
Cryptomator » Cryptomator » Version: 1.2.3

cpe:2.3:a:cryptomator:cryptomator:1.2.3
Cryptomator » Cryptomator » Version: 1.2.4

cpe:2.3:a:cryptomator:cryptomator:1.2.4
Cryptomator » Cryptomator » Version: 1.2.5

cpe:2.3:a:cryptomator:cryptomator:1.2.5
Cryptomator » Cryptomator » Version: 1.3.0

cpe:2.3:a:cryptomator:cryptomator:1.3.0
Cryptomator » Cryptomator » Version: 1.3.1

cpe:2.3:a:cryptomator:cryptomator:1.3.1
Cryptomator » Cryptomator » Version: 1.3.2

cpe:2.3:a:cryptomator:cryptomator:1.3.2
Cryptomator » Cryptomator » Version: 1.3.3

cpe:2.3:a:cryptomator:cryptomator:1.3.3
Cryptomator » Cryptomator » Version: 1.3.4

cpe:2.3:a:cryptomator:cryptomator:1.3.4
Cryptomator » Cryptomator » Version: 1.3.5

cpe:2.3:a:cryptomator:cryptomator:1.3.5
Cryptomator » Cryptomator » Version: 1.4.0

cpe:2.3:a:cryptomator:cryptomator:1.4.0
Cryptomator » Cryptomator » Version: 1.4.1

cpe:2.3:a:cryptomator:cryptomator:1.4.1
Cryptomator » Cryptomator » Version: 1.4.10

cpe:2.3:a:cryptomator:cryptomator:1.4.10
Cryptomator » Cryptomator » Version: 1.4.11

cpe:2.3:a:cryptomator:cryptomator:1.4.11
Cryptomator » Cryptomator » Version: 1.4.12

cpe:2.3:a:cryptomator:cryptomator:1.4.12
Cryptomator » Cryptomator » Version: 1.4.13

cpe:2.3:a:cryptomator:cryptomator:1.4.13
Cryptomator » Cryptomator » Version: 1.4.14

cpe:2.3:a:cryptomator:cryptomator:1.4.14
Cryptomator » Cryptomator » Version: 1.4.15

cpe:2.3:a:cryptomator:cryptomator:1.4.15
Cryptomator » Cryptomator » Version: 1.4.16

cpe:2.3:a:cryptomator:cryptomator:1.4.16
Cryptomator » Cryptomator » Version: 1.4.17

cpe:2.3:a:cryptomator:cryptomator:1.4.17
Cryptomator » Cryptomator » Version: 1.4.2

cpe:2.3:a:cryptomator:cryptomator:1.4.2
Cryptomator » Cryptomator » Version: 1.4.3

cpe:2.3:a:cryptomator:cryptomator:1.4.3
Cryptomator » Cryptomator » Version: 1.4.4

cpe:2.3:a:cryptomator:cryptomator:1.4.4
Cryptomator » Cryptomator » Version: 1.4.5

cpe:2.3:a:cryptomator:cryptomator:1.4.5
Cryptomator » Cryptomator » Version: 1.4.6

cpe:2.3:a:cryptomator:cryptomator:1.4.6
Cryptomator » Cryptomator » Version: 1.4.7

cpe:2.3:a:cryptomator:cryptomator:1.4.7
Cryptomator » Cryptomator » Version: 1.4.8

cpe:2.3:a:cryptomator:cryptomator:1.4.8
Cryptomator » Cryptomator » Version: 1.4.9

cpe:2.3:a:cryptomator:cryptomator:1.4.9
Cryptomator » Cryptomator » Version: 1.5.0

cpe:2.3:a:cryptomator:cryptomator:1.5.0
Cryptomator » Cryptomator » Version: 1.5.1

cpe:2.3:a:cryptomator:cryptomator:1.5.1
Cryptomator » Cryptomator » Version: 1.5.10

cpe:2.3:a:cryptomator:cryptomator:1.5.10
Cryptomator » Cryptomator » Version: 1.5.11

cpe:2.3:a:cryptomator:cryptomator:1.5.11
Cryptomator » Cryptomator » Version: 1.5.12

cpe:2.3:a:cryptomator:cryptomator:1.5.12
Cryptomator » Cryptomator » Version: 1.5.13

cpe:2.3:a:cryptomator:cryptomator:1.5.13
Cryptomator » Cryptomator » Version: 1.5.14

cpe:2.3:a:cryptomator:cryptomator:1.5.14
Cryptomator » Cryptomator » Version: 1.5.15

cpe:2.3:a:cryptomator:cryptomator:1.5.15
Cryptomator » Cryptomator » Version: 1.5.16

cpe:2.3:a:cryptomator:cryptomator:1.5.16
Cryptomator » Cryptomator » Version: 1.5.17

cpe:2.3:a:cryptomator:cryptomator:1.5.17
Cryptomator » Cryptomator » Version: 1.5.18

cpe:2.3:a:cryptomator:cryptomator:1.5.18
Cryptomator » Cryptomator » Version: 1.5.19

cpe:2.3:a:cryptomator:cryptomator:1.5.19
Cryptomator » Cryptomator » Version: 1.5.2

cpe:2.3:a:cryptomator:cryptomator:1.5.2
Cryptomator » Cryptomator » Version: 1.5.3

cpe:2.3:a:cryptomator:cryptomator:1.5.3
Cryptomator » Cryptomator » Version: 1.5.4

cpe:2.3:a:cryptomator:cryptomator:1.5.4
Cryptomator » Cryptomator » Version: 1.5.5

cpe:2.3:a:cryptomator:cryptomator:1.5.5
Cryptomator » Cryptomator » Version: 1.5.6

cpe:2.3:a:cryptomator:cryptomator:1.5.6
Cryptomator » Cryptomator » Version: 1.5.7

cpe:2.3:a:cryptomator:cryptomator:1.5.7
Cryptomator » Cryptomator » Version: 1.5.8

cpe:2.3:a:cryptomator:cryptomator:1.5.8
Cryptomator » Cryptomator » Version: 1.5.9

cpe:2.3:a:cryptomator:cryptomator:1.5.9
Cryptomator » Cryptomator » Version: 1.6.0

cpe:2.3:a:cryptomator:cryptomator:1.6.0
Cryptomator » Cryptomator » Version: 1.6.1

cpe:2.3:a:cryptomator:cryptomator:1.6.1
Cryptomator » Cryptomator » Version: 1.6.2

cpe:2.3:a:cryptomator:cryptomator:1.6.2
Cryptomator » Cryptomator » Version: 1.6.3

cpe:2.3:a:cryptomator:cryptomator:1.6.3
Cryptomator » Cryptomator » Version: 1.6.4

cpe:2.3:a:cryptomator:cryptomator:1.6.4
Cryptomator » Cryptomator » Version: 1.6.5

cpe:2.3:a:cryptomator:cryptomator:1.6.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25366

Products

Pricing

Contact Us