CVE-2022-26772

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787 CWE-119

Affected software

No affected versions have been published.

Timeline

Published: May 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-267737.1A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to CVE-2022-267747.8A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able CVE-2022-267759.8An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 1 CVE-2022-267769.8This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to CVE-2022-267775.3Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.CVE-2022-267786.5Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup con CVE-2022-267797.5Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created bas CVE-2022-26788.8A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects CVE-2022-267808.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.CVE-2022-267818.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.CVE-2022-267828.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.CVE-2022-267836.5Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability