60
CVE-2022-22675
KEVmassOut-of-Bounds Write in Apple macOS/iOS Kernel Allows Arbitrary Code Execution
CISA: Apple macOS Out-of-Bounds Write Vulnerability
CVSS 3.1
7.8 high
EPSS
12%p96
Published
()
KEV added
AI analysis
CVE-2022-22675 is an out-of-bounds write vulnerability (CWE-787) in the Apple kernel, addressed through improved bounds checking. It is triggered locally — the CVSS vector shows a local attack vector with user interaction, meaning an application running on the device can trigger the memory corruption. Successful exploitation allows an application to execute arbitrary code with kernel privileges, giving the attacker full control over the affected device. Users of iPhone, iPad, Mac, Apple TV, and Apple Watch running versions prior to the fixed releases are affected. Apple reported that the issue may have been actively exploited in the wild, and CISA added it to the Known Exploited Vulnerabilities catalog on 2022-04-04.
What to do: Update to iOS/iPadOS 15.4.1, macOS Monterey 12.3.1 or macOS Big Sur 11.6.6, tvOS 15.5, and watchOS 8.6 as required by CISA. Because the flaw is exploited in the wild and requires only a malicious local application, prioritize patching user-facing iPhone, iPad, and Mac fleets first. There is no public PoC; verify installed OS versions on managed devices and confirm remediation after the updates are applied.
Affected
| apple iphone_os (iOS) | prior to 15.4.1 |
| apple ipados | prior to 15.4.1 |
| apple macos (Big Sur) | prior to 11.6.6 |
| apple macos (Monterey) | prior to 12.3.1 |
| apple tvos | prior to 15.5 |
| apple watchos | prior to 8.6 |
Estimated exposure
mass≈1 billion+ active Apple devices across iPhone, iPad, Mac, Apple TV, and Apple Watch — Apple's active installed base publicly exceeds one billion devices, and the flaw affected all major Apple operating systems prior to the April/May 2022 updates, though the share still on vulnerable versions today is unknown.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
CISA Known Exploited Vulnerability
- Affected
- Apple macOS
- Required action
- Apply updates per vendor instructions.
- Due date
- Ransomware use
- Unknown
- Vendors
- apple
- Products
- ipados, iphone os, macos, tvos, watchos
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news20 stories
60
New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products
60
Apple fixed the tenth actively exploited zero
60
Apple backports fixes for CVE-2022-42827 zero
60
Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero
60
Apple Releases Security Updates to Patch Two New Zero
60
Apple fixed the ninth actively exploited zero
60
Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero
60
Apple fixed the eighth actively exploited zero
60
Apple released patches for recently disclosed WebKit zero
60
Apple fixed two new zero
60
Safari 15.6.1 fixes a zero
60
Apple fixes the sixth zero
60
60
60
CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability
60
CISA adds Spring4Shell flaw to its Known Exploited Vulnerabilities Catalog
60
Apple Issues Patches for 2 Actively Exploited Zero
60
Apple issues emergency patches to fix actively exploited zero
60