CVE-2022-22674: Apple macOS Out-of-Bounds Read Vulnerability

Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2022-04-04. EPSS: 1.1% chance of exploitation in the next 30 days.

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

Affected products

• Apple Mac OS X: from 10.15, before 10.15.7 (fixed in 10.15.7); version 10.15.7 only
• Apple macOS: from 11.0, before 11.6.6 (fixed in 11.6.6); from 12.0.0, before 12.3.1 (fixed in 12.3.1)

Published 2022-05-26. Last modified 2026-06-17.