CVE-2022-26765

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-362

Affected software

VendorProductVersions
ApplewatchOS>= unspecified, < 8.6
ApplewatchOS>= unspecified, < 15.5
ApplewatchOS>= unspecified, < 12.4
ApplewatchOS>= unspecified, < 15.5

References

Timeline

Published
May 26, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-267665.5A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update CVE-2022-267675.5The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious apCVE-2022-267687.8A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, CVE-2022-267697.8A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS MontCVE-2022-26779.8A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unkCVE-2022-267707.8An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS MoCVE-2022-267717.8A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 1CVE-2022-267727.8A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be abCVE-2022-267737.1A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able toCVE-2022-267747.8A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able CVE-2022-267759.8An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 1CVE-2022-267769.8This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to
CVE-2022-26765: Medium severity, CVSS 4.7 | Vulnix