
Cloud Vulnerability DB
A community-led vulnerabilities database
A buffer overflow vulnerability (CVE-2022-26741) was discovered in macOS Monterey versions prior to 12.4. The vulnerability was disclosed on May 16, 2022, when Apple released a security update addressing the issue. The vulnerability affects the AMD component in macOS Monterey operating system (Apple Advisory).
The vulnerability is a buffer overflow issue in the AMD component of macOS Monterey. The issue was addressed with improved memory handling. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access and user interaction, but no privileges, while potentially impacting confidentiality, integrity, and availability at a high level (NVD).
If successfully exploited, this vulnerability allows an application to execute arbitrary code with kernel privileges. This means an attacker could potentially gain complete control over the affected system, including the ability to execute commands with the highest level of access (Apple Advisory).
Apple has addressed this vulnerability in macOS Monterey 12.4. Users should update their systems to this version or later to protect against this vulnerability. The fix implements improved memory handling to prevent buffer overflow conditions (Apple Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."