Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-22674
HistoryMay 26, 2022 - 6:15 p.m.

CVE-2022-22674

2022-05-2618:15:00
CWE-125
[email protected]
web.nvd.nist.gov
1071
In Wild
4
cve-2022-22674
out-of-bounds read
kernel memory disclosure
input validation
macos monterey
security update 2022-004 catalina
macos big sur

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

25.4%

JSON

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Social References

More

Related

attackerkb 1
prion 1
cisa_kev 1
nessus 3
cisa 1
hivepro 2
apple 3
malwarebytes 2
threatpost 1
thn 6
openvas 2
attackerkb
attackerkb
CVE-2022-22674
2022-05-26 00:00:00
prion
prion
Input validation
2022-05-26 18:15:00
cisa_kev
cisa_kev
Apple macOS Out-of-Bounds Read Vulnerability
2022-04-04 00:00:00
nessus
nessus
macOS 12.x < 12.3.1 (HT213220)
2022-04-07 00:00:00
macOS 10.15.x < Catalina Security Update 2022-004 Catalina (HT213255)
2022-05-20 00:00:00
macOS 11.x < 11.6.6 Multiple Vulnerabilities (HT213256)
2022-05-20 00:00:00
cisa
cisa
Apple Releases Security Updates
2022-04-01 00:00:00
hivepro
hivepro
Two Vulnerabilities affecting Apple macOS exploited-in-the-wild
2022-04-02 00:31:17
Weekly Threat Digest: 28 March – 3 April 2022
2022-04-05 10:11:43
apple
apple
About the security content of macOS Monterey 12.3.1
2022-03-31 00:00:00
About the security content of Security Update 2022-004 Catalina
2022-05-16 00:00:00
About the security content of macOS Big Sur 11.6.6
2022-05-16 00:00:00
malwarebytes
malwarebytes
Update now! Apple patches two zero-day vulnerabilities that may have been actively exploited
2022-04-01 18:43:44
[updated] Important update! iPhones, Macs, and more vulnerable to zero-day bug
2022-09-13 14:00:00
threatpost
threatpost
Apple Rushes Out Patches for 0-Days in MacOS, iOS
2022-04-01 13:02:17
thn
thn
CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability
2022-04-05 07:31:00
Apple Issues Patches for 2 Actively Exploited Zero-Days in iPhone, iPad and Mac Devices
2022-04-01 02:43:00
Apple Releases Security Updates to Patch Two New Zero-Day Vulnerabilities
2022-08-18 03:08:00
openvas
openvas
Apple Mac OS X Security Update (HT213255)
2022-05-19 00:00:00
Apple Mac OS X Security Update (HT213256)
2022-05-19 00:00:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

25.4%

JSON
Related for CVE-2022-22674
attackerkb1prion1cisa_kev1nessus3cisa1hivepro2apple3malwarebytes2threatpost1thn6openvas2