medium5.5Known exploited
CVE-2022-22674
Apple macOS Out-of-Bounds Read Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-04-04. Federal due date: 2022-04-25.
Apply updates per vendor instructions.
Impact
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | from 10.15 before 10.15.7 Version 10.15.7 |
| Apple | Macos | from 11.0 before 11.6.6 from 12.0.0 before 12.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://support.apple.com/en-us/HT213220
- https://support.apple.com/en-us/HT213255
- https://support.apple.com/en-us/HT213256
- https://support.apple.com/en-us/HT213220
- https://support.apple.com/en-us/HT213255
- https://support.apple.com/en-us/HT213256
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22674