Out-of-Bounds Read in macOS Monterey (CVE‑2022‑22674) Enables Kernel Memory Disclosure
What It Is – macOS 12 Monterey contains an out‑of‑bounds read flaw in the kernel that can allow a malicious or compromised application to read arbitrary kernel memory.
Exploitability – The vulnerability is publicly disclosed (CVE‑2022‑22674) and assigned a CVSS 3.1 base score of 7.5 (High). No public exploit code has been released, but the flaw is exploitable by a local user‑space process.
Affected Products – Apple macOS 12 Monterey (all builds prior to the security update released March 2023).
Why It Matters for Trust & Control Assurance
- Vulnerability Management – Demonstrates the need for a documented process that continuously inventories operating‑system versions, tracks vendor advisories, and applies patches within defined service‑level windows.
- Secure Configuration – Controls that require “systems are securely configured and kept up‑to‑date” map to this finding across NIST CSF, ISO 27001, and other frameworks; evidence of timely patching is a key audit artifact.
- Defensible Evidence – Continuous monitoring of patch status provides the defensible evidence enterprises need to show due diligence to regulators and customers.
Recommended Actions
- Verify the macOS version on all endpoints; upgrade to the Apple‑released security update that resolves CVE‑2022‑22674.
- Enable automatic macOS updates and enforce a policy that prohibits downgrade to vulnerable builds.
- Incorporate the patch‑status check into your continuous compliance monitoring platform to capture evidence of remediation.
- Log any anomalous kernel‑memory access attempts and correlate with endpoint detection tools.
Source: CISA KEV – CVE‑2022‑22674