CVEvulnerability
CVE-2022-26743
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges.
Affected configurations
• apple macos (>= 12.0 < 12.4)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/HT213257 Vendor Advisory
- https://support.apple.com/en-us/HT213257 Vendor Advisory