Apple macOS Out-of-Bounds Read Vulnerability

MOYENNE 5.5EXPLOITED (CISA KEV)CVE-2022-22674 · Published 26/05/2022 · updated 17/06/2026

Apple macOS Out-of-Bounds Read Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 04/04/2022. Patch affected systems as an emergency.

En bref

CVE-2022-22674 est une vulnérabilité MOYENNE (CVSS 5.5).
Exploitée activement : la CISA l'a ajoutée au catalogue KEV le 04/04/2022.
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 65.3% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
macOS Apple	Versions not published yet (product named by CISA KEV)

Description

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

References

support.apple.com/en-us/HT213220 · Release Notes
support.apple.com/en-us/HT213255 · Release Notes
support.apple.com/en-us/HT213256 · Release Notes
cisa.gov/known-exploited-vulnerabilities-catalog · Third Party Advisory
CISA KEV · CVE-2022-22674

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free