CVE-2022-26769

Vulnerability

A memory corruption issue exists in macOS kernel memory handling, addressed with improved input validation and state management. The vulnerability affects macOS Monterey 12.4, macOS Big Sur 11.6.6, and Security Update 2022-004 for Catalina. An application can exploit this to execute arbitrary code with kernel privileges. [1]

Exploitation

An attacker must have the ability to run a malicious application locally on the target macOS system. No additional privileges or user interaction beyond launching the app are required. The exact exploitation steps are not publicly detailed by Apple, but the flaw is triggered by corrupting kernel memory via the malicious application. [1]

Impact

Successful exploitation allows an attacker to execute arbitrary code with kernel privileges, leading to full compromise of the operating system. This typically enables disabling security mechanisms, accessing all files, and installing persistent malware. [1]

Mitigation

Apple has fixed the issue in macOS Monterey 12.4, macOS Big Sur 11.6.6, and Security Update 2022-004 for Catalina, all released on May 16, 2022. Users should install the latest updates from System Preferences or Software Update. No workarounds are available. [1][3]