HIGH

CVE-2022-22675

Apple Ipados 2022-05-26 CVSS v3.1

CVSS

7.8

KEV

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Summary dbcve.org

CVE-2022-22675 is an out-of-bounds write vulnerability in Apple's kernel that allows a malicious application to escalate privileges and execute arbitrary code with kernel-level access. This zero-day vulnerability affected iOS, iPadOS, macOS, tvOS, and watchOS before being patched in the mentioned point releases.

Mitigation

Apply the appropriate OS security update (iOS 15.4.1/iPadOS 15.4.1, macOS Monterey 12.3.1/Big Sur 11.6.6, tvOS 15.5, or watchOS 8.6) to all affected devices immediately given confirmed active exploitation in the wild.

Weakness (CWE)

CWE-787 Out-of-bounds Write

EPSS Score

12.49%

Probability of exploitation in next 30 days

96.1th percentile

References

https://support.apple.com/en-us/HT213219 Release Notes, Vendor Advisory https://support.apple.com/en-us/HT213220 Release Notes, Vendor Advisory https://support.apple.com/en-us/HT213253 Release Notes, Vendor Advisory https://support.apple.com/en-us/HT213254 Release Notes, Vendor Advisory https://support.apple.com/en-us/HT213256 Release Notes, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22675 Third Party Advisory, US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE