# CVE-2022-22674

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

- Page: https://www.vulneraibility.com/cve/CVE-2022-22674
- CVSS: 5.5
- Known exploited: yes, in CISA KEV since 2022-04-04; CISA due date 2022-04-25
- EPSS: 1.09% (percentile 65.8)
- CISA SSVC: exploitation active, automatable no, technical impact partial (assessed 2025-01-29)
- Weakness: CWE-125
- Published: 2022-05-26

## Affected versions

- Apple macOS: affected < 12.3; < 2022; < 11.6

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://support.apple.com/en-us/HT213255
- [other] https://support.apple.com/en-us/HT213256
- [other] https://support.apple.com/en-us/HT213220
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22674

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.