CVE-2022-22675

moderate-risk

Published 2022-05-26

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Do I need to act?

1.1% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (5)

Ipados

Iphone Os

Macos

Tvos

Watchos

Affected Vendors

Apple

References (11)

Release Notes https://support.apple.com/en-us/HT213219

Release Notes https://support.apple.com/en-us/HT213220

Release Notes https://support.apple.com/en-us/HT213253

Release Notes https://support.apple.com/en-us/HT213254

Release Notes https://support.apple.com/en-us/HT213256

Release Notes https://support.apple.com/en-us/HT213219

Release Notes https://support.apple.com/en-us/HT213220

Release Notes https://support.apple.com/en-us/HT213253

Release Notes https://support.apple.com/en-us/HT213254

Release Notes https://support.apple.com/en-us/HT213256

Third Party Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-...

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 10/34 · Low

Exposure 12/34 · Low