CVE-2022-22586

CRITICAL

macOS Monterey <12.2 - Code Injection

Title source: llm
STIX 2.1

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213054

Scores

CVSS v3 9.8
EPSS 0.0193
EPSS Percentile 77.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
apple/macos < 12.2
Published Mar 18, 2022
Tracked Since Feb 18, 2026