EXPOSURES › CVE-2022-22674
CVE-2022-22674
HIGH ⌖ ON CISA KEV · EXPLOITEDAn out-of-bounds read vulnerability in macOS Monterey allowed applications to read kernel memory, which was actively exploited in the wild.
This out-of-bounds read flaw in macOS Monterey let malicious apps access kernel memory, potentially exposing sensitive data or enabling further attacks. DIB organizations must ensure all macOS devices are patched immediately, as this vulnerability was actively exploited in the wild and represents a significant compliance risk under NIST 800-171 for unpatched systems.
Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed kernel memory access, indicating a severe, avoidable failure in patching and system hardening.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.