CVE-2022-26768

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
May 26, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-267697.8A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS MontCVE-2022-26779.8A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unkCVE-2022-267707.8An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS MoCVE-2022-267717.8A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 1CVE-2022-267727.8A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be abCVE-2022-267737.1A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able toCVE-2022-267747.8A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able CVE-2022-267759.8An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 1CVE-2022-267769.8This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to CVE-2022-267775.3Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.CVE-2022-267786.5Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup conCVE-2022-267797.5Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created bas
CVE-2022-26768: High severity, CVSS 7.8 | Vulnix