Lucene search

[email protected]NVD:CVE-2022-22674

HistoryMay 26, 2022 - 6:15 p.m.

CVE-2022-22674

2022-05-2618:15:09

CWE-125

[email protected]

web.nvd.nist.gov

out-of-bounds read

kernel memory disclosure

input validation

macos updates

local user

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

26.5%

JSON

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

Affected configurations

Nvd

Node

applemac_os_xRange10.15–10.15.7

applemac_os_xMatch10.15.7-

applemac_os_xMatch10.15.7security_update_2020

applemac_os_xMatch10.15.7security_update_2020-001

applemac_os_xMatch10.15.7security_update_2020-005

applemac_os_xMatch10.15.7security_update_2020-007

applemac_os_xMatch10.15.7security_update_2021-001

applemac_os_xMatch10.15.7security_update_2021-002

applemac_os_xMatch10.15.7security_update_2021-003

applemac_os_xMatch10.15.7security_update_2021-006

applemac_os_xMatch10.15.7security_update_2021-007

applemac_os_xMatch10.15.7security_update_2021-008

applemac_os_xMatch10.15.7security_update_2022-001

applemac_os_xMatch10.15.7security_update_2022-002

applemac_os_xMatch10.15.7security_update_2022-003

applemac_os_xMatch10.15.7supplemental_update

applemacosRange11.0–11.6.6

applemacosRange12.0.0–12.3.1

VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:-::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006::::::