{"id":"CVE-2022-22675","kind":"vulnerability","aliases":["CVE-2022-22675"],"related":[],"title":"Apple macOS: Apple macOS Out-of-Bounds Write Vulnerability","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","summary":"An out-of-bounds write in macOS Monterey lets an application run arbitrary code with kernel privileges. That means a local app can take full control of the Mac.","severity":"critical","cvss":9.3,"epss":0.12492,"exploited":true,"exploited_at":"2022-04-04T00:00:00+00:00","products":[{"name":"Apple macOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","infrastructure","macos","monterey"],"not_affected_if":["macos-patched","not-monterey"],"how_to_check":"Run sw_vers on the Mac and check whether the ProductVersion is below the Monterey release that Apple fixed for CVE-2022-22675.","fix":"Update macOS Monterey to the fixed release per Apple's security notes for CVE-2022-22675 (CISA says apply vendor updates).","status":"open","published_at":"2022-04-04T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:18:09+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:18:09Z","model":"claude-haiku-5-5","output":{"fix":"Update macOS Monterey to the fixed release per Apple's security notes for CVE-2022-22675 (CISA says apply vendor updates).\nunknown","reach":"local","impact":"high","summary":"An out-of-bounds write in macOS Monterey lets an application run arbitrary code with kernel privileges. That means a local app can take full control of the Mac.","category":"infrastructure","who_cares":["macos","monterey","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Local app runs arbitrary code with kernel privileges, taking full control of the Mac","analyst_note":"Find the fixed macOS Monterey build number from Apple's security notes page for CVE-2022-22675 and add it to how_to_check and fix.","how_to_check":"Run sw_vers on the Mac and check whether the ProductVersion is below the Monterey release that Apple fixed for CVE-2022-22675.\nunknown","needs_analyst":true,"not_affected_if":["macos-patched","not-monterey"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000479,"input_tokens":2821,"output_tokens":394,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2022':12A,15A '-22675':13A,16A '..':116C '11.6.6':81C '12.3.1':84C '15.4.1':86C,89C '15.5':75C '8.6':77C 'abl':94C 'activ':114C 'address':64C 'app':48B 'appl':1A,3A,20B,102C 'apple':17A 'apple-devic':19B 'applic':37B,91C 'arbitrari':39B,97C 'awar':104C 'big':79C 'bound':8A,30B,60C,67C 'check':68C 'code':40B,98C 'control':52B 'cve':11A,14A 'devic':21B 'execut':96C 'exploit':22B,115C 'fix':72C 'full':51B 'improv':66C 'infrastructur':23B 'io':85C 'ipado':88C 'issu':62C,70C,110C 'kernel':42B,100C 'let':35B 'local':47B 'mac':55B 'maco':2A,4A,24B,33B,78C,82C 'macos':18A 'may':92C,111C 'mean':45B 'monterey':25B,34B,83C 'out-of-bound':5A,27B,57C 'privileg':43B,101C 'report':107C 'run':38B 'sur':80C 'take':50B 'tvos':74C 'vulner':10A 'watcho':76C 'write':9A,31B,61C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2022-04-04T00:00:00+00:00","kev":{"dateAdded":"2022-04-04","dueDate":"2022-04-25","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2022-22675","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22675","severity":null,"published_at":"2022-04-04T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T17:39:57+00:00","note":null},{"source":"epss","external_id":"CVE-2022-22675","url":"https://api.first.org/data/v1/epss?cve=CVE-2022-22675","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2022-22675","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22675","severity":null,"published_at":"2022-05-26T18:15:09+00:00","modified_at":"2026-06-17T04:28:47+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}