All vulnerabilities
CVE-2022-22675

Apple macOS Out-of-Bounds Write Vulnerability

Apple macOSOperating systems
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationExploited in the wildAdded to KEV 4 Apr 2022CISA KEV
Exploit odds (EPSS)12.5%Chance of exploitation activity in the next 30 days, higher than 96% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in15.4Also 12.3, 8.6 and 2 moreCVE List
Federal deadline25 Apr 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 4 Apr 2022Added to CISA KEVCISA KEV
  2. 26 May 2022, 17:44 UTCPublishedCVE List

Description

macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.

Text from CVE List

Affected versions 5

  • iOS and iPadOSaffected: unspecified before 15.4CVE List
  • macOSaffected: unspecified before 12.3CVE List
  • watchOSaffected: unspecified before 8.6CVE List
  • watchOSaffected: unspecified before 15.5CVE List
  • watchOSaffected: unspecified before 11.6CVE List

References 7