CVE-2022-26776

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Apple	macOS	>= unspecified, < 11.6
Apple	macOS	>= unspecified, < 12.4

References

https://support.apple.com/en-us/HT213256Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213257Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213253
https://support.apple.com/kb/HT213254
https://support.apple.com/kb/HT213258
https://support.apple.com/en-us/HT213256Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213257Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213253
https://support.apple.com/kb/HT213254
https://support.apple.com/kb/HT213258

Timeline

Published: May 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-267775.3Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.CVE-2022-267786.5Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup con CVE-2022-267797.5Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created bas CVE-2022-26788.8A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects CVE-2022-267808.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.CVE-2022-267818.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.CVE-2022-267828.8Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.CVE-2022-267836.5Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability CVE-2022-267846.5Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability CVE-2022-267856.5Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability CVE-2022-267867.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-267877.8Windows Print Spooler Elevation of Privilege Vulnerability