CVE-2022-22625

7.1 highEPSS 1.1%

High (7.1) in apple. EPSS 1.1% chance of exploitation in the next 30 days.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2022-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:mac_os_x
apple:macos

References

https://support.apple.com/en-us/HT213183
https://support.apple.com/en-us/HT213184
https://support.apple.com/en-us/HT213185
https://support.apple.com/en-us/HT213183
https://support.apple.com/en-us/HT213184

Check your stack JSON