CVE-2022-26739

HIGH

Apple TV OS <15.5- iPad OS <15.5 - Privilege Escalation

Title source: llm

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213258

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213254

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213257

Scores

CVSS v3 7.8

EPSS 0.0092

EPSS Percentile 56.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (4)

apple/ipados < 15.5

apple/iphone_os < 15.5

apple/macos 12.0 - 12.4

apple/tvos < 15.5

Published May 26, 2022

Tracked Since Feb 18, 2026