Apple Macos Big Sur vulnerabilities

CVE-2022-32853 [HIGH] CVE-2022-32853: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32853 Component: AppleScript Impact: Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2021-30716 [MEDIUM] CVE-2021-30716: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30716 Component: Security Impact: Processing a maliciously crafted certificate may lead to arbitrary code execution Description: A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code.

CVE-2021-30689 [MEDIUM] CVE-2021-30689: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30689 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue was addressed with improved state management.

CVE-2021-30744 [MEDIUM] CVE-2021-30744: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30744 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins.

CVE-2021-1826 [MEDIUM] CVE-2021-1826: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1826 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue was addressed with improved restrictions.

CVE-2021-30855 [MEDIUM] CVE-2021-30855: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30855 Component: Preferences Impact: An application may be able to access restricted files Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2021-30828 [MEDIUM] CVE-2021-30828: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30828 Component: CUPS Impact: A local user may be able to read arbitrary files as root Description: This issue was addressed with improved checks.

CVE-2021-30813 [MEDIUM] CVE-2021-30813: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30813 Component: Login Window Impact: A person with access to a host Mac may be able to bypass the Login Window in Remote Desktop for a locked instance of macOS Description: A logic issue was addressed with improved checks.

CVE-2022-26766 [MEDIUM] CVE-2022-26766: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-26766 Component: Security Impact: A malicious app may be able to bypass signature validation Description: A certificate parsing issue was addressed with improved checks.

CVE-2022-32786 [MEDIUM] CVE-2022-32786: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32786 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: An issue in the handling of environment variables was addressed with improved validation.

CVE-2022-32800 [MEDIUM] CVE-2022-32800: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32800 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved checks.

CVE-2021-1883 [MEDIUM] CVE-2021-1883: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1883 Component: Heimdal Impact: Processing maliciously crafted server messages may lead to heap corruption Description: This issue was addressed with improved checks.

CVE-2022-22583 [MEDIUM] CVE-2022-22583: macOS Big Sur 11.6.3 Apple Security Update: About the security content of macOS Big Sur 11.6.3 Product: macOS Big Sur Version: 11.6.3 CVE: CVE-2022-22583 Component: PackageKit Impact: An application may be able to access restricted files Description: A permissions issue was addressed with improved validation.

CVE-2021-30912 [MEDIUM] CVE-2021-30912: macOS Big Sur 11.6.1 Apple Security Update: About the security content of macOS Big Sur 11.6.1 Product: macOS Big Sur Version: 11.6.1 CVE: CVE-2021-30912 Component: SoftwareUpdate Impact: A malicious application may gain access to a user's Keychain items Description: The issue was addressed with improved permissions logic.

CVE-2022-32838 [MEDIUM] CVE-2022-32838: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32838 Component: PluginKit Impact: An app may be able to read arbitrary files Description: A logic issue was addressed with improved state management.

CVE-2023-32360 [MEDIUM] CVE-2023-32360: macOS Big Sur 11.7.7 Apple Security Update: About the security content of macOS Big Sur 11.7.7 Product: macOS Big Sur Version: 11.7.7 CVE: CVE-2023-32360 Component: CUPS Impact: An unauthenticated user may be able to access recently printed documents Description: An authentication issue was addressed with improved state management.

CVE-2021-30738 [MEDIUM] CVE-2021-30738: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30738 Component: PackageKit Impact: A malicious application may be able to overwrite arbitrary files Description: An issue with path validation logic for hardlinks was addressed with improved path sanitization.

CVE-2023-27955 [MEDIUM] CVE-2023-27955: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-27955 Component: ColorSync Impact: An app may be able to read arbitrary files Description: The issue was addressed with improved checks.

CVE-2022-0530 [MEDIUM] CVE-2022-0530: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-0530 Component: CVE-2022-0530 Impact: An attacker may be able to cause unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed with improved input validation.

CVE-2021-30682 [MEDIUM] CVE-2021-30682: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30682 Component: WebKit Impact: A malicious application may be able to leak sensitive user information Description: A logic issue was addressed with improved restrictions.