CVE-2022-26743: Apple macOS

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges.

Affected products

• Apple macOS: from 12.0, before 12.4 (fixed in 12.4)

Published 2022-05-26. Last modified 2026-06-17.