Back to CVE Browser

CVE-2022-22674

🔥 Known Exploited (CISA KEV)MEDIUM

5.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-05-26

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

Affected Platforms (CPE)

💻

Apple

Mac Os X

>= 10.15 and < 10.15.7= 10.15.7

💻

Apple

Macos

>= 11.0 and < 11.6.6>= 12.0.0 and < 12.3.1

References & Advisories

🔗 https://support.apple.com/en-us/HT213220

🔗 https://support.apple.com/en-us/HT213255

🔗 https://support.apple.com/en-us/HT213256

🔗 https://support.apple.com/en-us/HT213220

🔗 https://support.apple.com/en-us/HT213255

🔗 https://support.apple.com/en-us/HT213256

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22674

Related Vulnerabilities

CVE-2026-660357.7

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a ma...

CVE-2026-476894.6

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2...

CVE-2026-476877.3

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2...

CVE-2026-215757.1

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree...