CVE-2022-22587

A memory corruption flaw in Apple's IOMobileFrameBuffer allowed malicious apps to execute kernel-level code, and it was actively exploited in the wild.

This vulnerability enabled arbitrary kernel code execution from a malicious application, representing a severe breach of the device's security model. For DIB organizations, reliance on unpatched Apple devices in classified environments risks total system compromise and violates CMMC/NIST 800-171 requirements for patching known vulnerabilities. Organizations must enforce strict device management and rapid patching cycles to prevent exploitation of such high-severity flaws.

Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed arbitrary kernel code execution, indicating a severe, avoidable failure in Apple's security engineering and patching cadence.