Apple · macOS
CVE-2022-22674
Apple macOS Out-of-Bounds Read Vulnerability
What it is
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.
CISA: macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: April 25, 2022
More exploited flaws from Apple
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 18, 2026 | Improper Authentication | macOS | Critical 9.8 | 1.7% |
| Apr 17, 2023 | Use-After-Free | macOS | High 7.8 | 0.7% |
| Apr 4, 2022 | Out-of-Bounds Write | macOS | High 7.8 | 12% |
| Nov 3, 2021 | Unspecified | macOS | Medium 5.5 | 69% |
| Nov 3, 2021 | Unspecified | macOS | High 7.8 | 7.0% |
| Sep 29, 2026 | Out-of-Bounds Write | Multiple Products | High 8.8 | 26% |
| Mar 20, 2026 | Buffer Overflow | Multiple Products | High 8.8 | 1.7% |
| Mar 20, 2026 | Improper Locking | Multiple Products | High 7.8 | 0.4% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.