CVE-2022-26775: Apple Mac OS X

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.

Affected products

• Apple Mac OS X: from 10.15, before 10.15.7 (fixed in 10.15.7); version 10.15.7 only
• Apple macOS: from 12.0.0, before 12.4 (fixed in 12.4)

Published 2022-05-26. Last modified 2026-06-17.