CVE-2022-26770

Summary

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected Software

VendorProductVersion RangeStatus
AppleSecurity Update - Catalinaunspecified < 2022affected
ApplemacOSunspecified < 11.6affected
ApplemacOSunspecified < 12.4affected

Weaknesses

  • A malicious application may be able to execute arbitrary code with kernel privileges

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References