CVE-2022-22586: Apple macOS

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected products

• Apple macOS: before 12.2 (fixed in 12.2)

Published 2022-03-18. Last modified 2026-06-17.