Apple Macos Big Sur vulnerabilities

CVE-2022-32807 [HIGH] CVE-2022-32807: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32807 Component: Spindump Impact: An app may be able to overwrite arbitrary files Description: This issue was addressed with improved file handling.

CVE-2021-30652 [HIGH] CVE-2021-30652: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-30652 Component: Kernel Impact: A malicious application may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2021-30892 [MEDIUM] CVE-2021-30892: macOS Big Sur 11.6.1 Apple Security Update: About the security content of macOS Big Sur 11.6.1 Product: macOS Big Sur Version: 11.6.1 CVE: CVE-2021-30892 Component: Windows Server Impact: A local attacker may be able to view the previous logged-in user’s desktop from the fast user switching screen Description: An authentication issue was addressed with improved state management.

CVE-2021-1860 [MEDIUM] CVE-2021-1860: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1860 Component: Kernel Impact: A malicious application may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling.

CVE-2021-1857 [MEDIUM] CVE-2021-1857: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1857 Component: CFNetwork Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A memory initialization issue was addressed with improved memory handling.

CVE-2022-22589 [MEDIUM] CVE-2022-22589: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-22589 Component: WebKit Impact: Processing a maliciously crafted mail message may lead to running arbitrary javascript Description: A validation issue was addressed with improved input sanitization.

CVE-2022-26706 [MEDIUM] CVE-2022-26706: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-26706 Component: LaunchServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions on third-party applications.

CVE-2023-0512 [HIGH] CVE-2023-0512: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-0512 Component: CVE-2023-0512

CVE-2023-32357 [HIGH] CVE-2023-32357: macOS Big Sur 11.7.7 Apple Security Update: About the security content of macOS Big Sur 11.7.7 Product: macOS Big Sur Version: 11.7.7 CVE: CVE-2023-32357 Component: Sandbox Impact: An app may be able to retain access to system configuration files even after its permission is revoked Description: An authorization issue was addressed with improved state management.

CVE-2023-42832 [HIGH] CVE-2023-42832: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-42832 Component: Software Update Impact: An app may be able to gain root privileges Description: A race condition was addressed with improved state handling.

CVE-2021-1873 [MEDIUM] CVE-2021-1873: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1873 Component: WindowServer Impact: A malicious application may be able to unexpectedly leak a user's credentials from secure text fields Description: An API issue in Accessibility TCC permissions was addressed with improved state management.

CVE-2021-30659 [MEDIUM] CVE-2021-30659: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-30659 Component: CoreFoundation Impact: A malicious application may be able to leak sensitive user information Description: A validation issue was addressed with improved logic.

CVE-2023-1801 [MEDIUM] CVE-2023-1801: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-1801 Component: CVE-2023-1801

CVE-2021-30722 [MEDIUM] CVE-2021-30722: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30722 Component: Security Impact: Processing a maliciously crafted certificate may lead to arbitrary code execution Description: A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code.

CVE-2022-32843 [HIGH] CVE-2022-32843: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32843 Component: PS Normalizer Impact: Processing a maliciously crafted Postscript file may result in unexpected app termination or disclosure of process memory Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2023-28320 [MEDIUM] CVE-2023-28320: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-28320 Component: CVE-2023-28320

CVE-2022-26691 [MEDIUM] CVE-2022-26691: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-26691 Component: CUPS Impact: An application may be able to gain elevated privileges Description: A logic issue was addressed with improved state management.

CVE-2021-1825 [MEDIUM] CVE-2021-1825: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1825 Component: WebKit Impact: Processing maliciously crafted web content may lead to a cross site scripting attack Description: An input validation issue was addressed with improved input validation.

CVE-2021-30696 [MEDIUM] CVE-2021-30696: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30696 Component: Mail Impact: An attacker in a privileged network position may be able to misrepresent application state Description: A logic issue was addressed with improved state management.

CVE-2022-22626 [HIGH] CVE-2022-22626: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-22626 Component: AppleScript Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking.