Versio.io

CVE-2022-26764

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 26-05-2022 10:15
Last modified: - 08-06-2022 02:55
Total changes: - 3

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
High
Attack complexity
Local
Attack vector
None
Availability
None
Confidentiality
High
Integrity
None
Privileges required
Unchanged
Scope
Required
User interaction
4.7
Base score
1.0
3.6
Exploitability score
Impact score
 

Verification logic

OR
vendor=apple AND product=iphone_os AND versionEndExcluding=15.5
vendor=apple AND product=watchos AND versionEndExcluding=8.6
vendor=apple AND product=tvos AND versionEndExcluding=15.5
vendor=apple AND product=ipados AND versionEndExcluding=15.5
vendor=apple AND product=macos AND versionStartIncluding=12.0 AND versionEndExcluding=12.4
 

Reference

 


Keywords

NVD

 

CVE-2022-26764

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.