Apple Macos Big Sur vulnerabilities

CVE-2023-27936 [HIGH] CVE-2023-27936: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-27936 Component: CommCenter Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2023-27946 [HIGH] CVE-2023-27946: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-27946 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2023-32401 [HIGH] CVE-2023-32401: macOS Big Sur 11.7.7 Apple Security Update: About the security content of macOS Big Sur 11.7.7 Product: macOS Big Sur Version: 11.7.7 CVE: CVE-2023-32401 Component: Quick Look Impact: Parsing an office document may lead to an unexpected app termination or arbitrary code execution Description: A buffer overflow was addressed with improved bounds checking.

CVE-2022-32900 [HIGH] CVE-2022-32900: macOS Big Sur 11.7 Apple Security Update: About the security content of macOS Big Sur 11.7 Product: macOS Big Sur Version: 11.7 CVE: CVE-2022-32900 Component: PackageKit Impact: An app may be able to gain elevated privileges Description: A logic issue was addressed with improved state management.

CVE-2021-1849 [HIGH] CVE-2021-1849: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1849 Component: AppleMobileFileIntegrity Impact: A malicious application may be able to bypass Privacy preferences Description: An issue in code signature validation was addressed with improved checks.

CVE-2022-32910 [HIGH] CVE-2022-32910: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32910 Component: Archive Utility Impact: An archive may be able to bypass Gatekeeper Description: A logic issue was addressed with improved checks.

CVE-2023-32397 [HIGH] CVE-2023-32397: macOS Big Sur 11.7.7 Apple Security Update: About the security content of macOS Big Sur 11.7.7 Product: macOS Big Sur Version: 11.7.7 CVE: CVE-2023-32397 Component: Shell Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management.

CVE-2023-32444 [HIGH] CVE-2023-32444: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-32444 Component: NSSpellChecker Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved validation.

CVE-2022-32882 [CRITICAL] CVE-2022-32882: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-32882 Component: Libinfo Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved checks.

CVE-2023-27944 [HIGH] CVE-2023-27944: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-27944 Component: XPC Impact: An app may be able to break out of its sandbox Description: This issue was addressed with a new entitlement.

CVE-2022-2000 [HIGH] CVE-2022-2000: macOS Big Sur 11.7 Apple Security Update: About the security content of macOS Big Sur 11.7 Product: macOS Big Sur Version: 11.7 CVE: CVE-2022-2000 Component: CVE-2022-2000

CVE-2023-32443 [HIGH] CVE-2023-32443: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-32443 Component: Security Impact: An app may be able to fingerprint the user Description: This issue was addressed by removing the vulnerable code.

CVE-2021-1784 [HIGH] CVE-2021-1784: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1784 Component: DiskArbitration Impact: A malicious application may be able to modify protected parts of the file system Description: A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.

CVE-2021-30821 [HIGH] CVE-2021-30821: macOS Big Sur 11.6.1 Apple Security Update: About the security content of macOS Big Sur 11.6.1 Product: macOS Big Sur Version: 11.6.1 CVE: CVE-2021-30821 Component: IOGraphics Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2021-30681 [HIGH] CVE-2021-30681: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30681 Component: Core Services Impact: A malicious application may be able to gain root privileges Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2021-30830 [HIGH] CVE-2021-30830: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30830 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2022-26770 [HIGH] CVE-2022-26770: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-26770 Component: Intel Graphics Driver Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2021-30715 [HIGH] CVE-2021-30715: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30715 Component: Kernel Impact: Processing a maliciously crafted message may lead to a denial of service Description: A logic issue was addressed with improved state management.

CVE-2021-30672 [HIGH] CVE-2021-30672: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30672 Component: Bluetooth Impact: A memory corruption issue was addressed with improved state management Description: A malicious application may be able to gain root privileges

CVE-2021-1875 [HIGH] CVE-2021-1875: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1875 Component: Kernel Impact: A malicious application may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved bounds checking.