---
id: "CVE-2022-22675"
kind: "vulnerability"
aliases: ["CVE-2022-22675"]
title: "Apple macOS: Apple macOS Out-of-Bounds Write Vulnerability"
severity: "critical"
cvss: 9.3
epss: 0.12492
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Apple macOS", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apple-devices", "exploited", "infrastructure", "macos", "monterey"]
not_affected_if: ["macos-patched", "not-monterey"]
published_at: "2022-04-04T00:00:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22675", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-22675", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22675", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Apple macOS: Apple macOS Out-of-Bounds Write Vulnerability

An out-of-bounds write in macOS Monterey lets an application run arbitrary code with kernel privileges. That means a local app can take full control of the Mac.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple macOS affected ? fixed ?

## How to check

Run sw_vers on the Mac and check whether the ProductVersion is below the Monterey release that Apple fixed for CVE-2022-22675.

## Fix

Update macOS Monterey to the fixed release per Apple's security notes for CVE-2022-22675 (CISA says apply vendor updates).

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22675
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2022-22675
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-22675

## From the sources

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_