Apple Macos Big Sur vulnerabilities

CVE-2021-30963 [MEDIUM] CVE-2021-30963: macOS Big Sur 11.6.2 Apple Security Update: About the security content of macOS Big Sur 11.6.2 Product: macOS Big Sur Version: 11.6.2 CVE: CVE-2021-30963 Component: CoreAudio Impact: Parsing a maliciously crafted audio file may lead to disclosure of user information Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2021-30751 [MEDIUM] CVE-2021-30751: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30751 Component: Sandbox Impact: A malicious application may be able to bypass certain Privacy preferences Description: This issue was addressed with improved data protection.

CVE-2022-26745 [MEDIUM] CVE-2022-26745: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-26745 Component: Wi-Fi Impact: A malicious application may disclose restricted memory Description: A memory corruption issue was addressed with improved validation.

CVE-2022-26767 [MEDIUM] CVE-2022-26767: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-26767 Component: LaunchServices Impact: A malicious application may be able to bypass Privacy preferences Description: The issue was addressed with additional permissions checks.

CVE-2022-22648 [MEDIUM] CVE-2022-22648: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-22648 Component: AppleScript Impact: An application may be able to read restricted memory Description: This issue was addressed with improved checks.

CVE-2023-23499 [MEDIUM] CVE-2023-23499: macOS Big Sur 11.7.3 Apple Security Update: About the security content of macOS Big Sur 11.7.3 Product: macOS Big Sur Version: 11.7.3 CVE: CVE-2023-23499 Component: AppleMobileFileIntegrity Impact: An app may be able to access user-sensitive data Description: This issue was addressed by enabling hardened runtime.

CVE-2021-1739 [MEDIUM] CVE-2021-1739: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1739 Component: Preferences Impact: A local user may be able to modify protected parts of the file system Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2023-27941 [MEDIUM] CVE-2023-27941: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-27941 Component: Kernel Impact: An app may be able to disclose kernel memory Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation.

CVE-2021-30972 [MEDIUM] CVE-2021-30972: macOS Big Sur 11.6.3 Apple Security Update: About the security content of macOS Big Sur 11.6.3 Product: macOS Big Sur Version: 11.6.3 CVE: CVE-2021-30972 Component: TCC Impact: A malicious application may be able to bypass certain Privacy preferences Description: This issue was addressed with improved checks.

CVE-2023-28200 [MEDIUM] CVE-2023-28200: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-28200 Component: Kernel Impact: An app may be able to disclose kernel memory Description: A validation issue was addressed with improved input sanitization.

CVE-2021-30756 [MEDIUM] CVE-2021-30756: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30756 Component: MediaRemote Impact: A privacy issue in Now Playing was addressed with improved permissions Description: A local attacker may be able to view Now Playing information from the lock screen.

CVE-2021-30697 [MEDIUM] CVE-2021-30697: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30697 Component: Heimdal Impact: A local user may be able to leak sensitive user information Description: A logic issue was addressed with improved state management.

CVE-2023-32355 [MEDIUM] CVE-2023-32355: macOS Big Sur 11.7.7 Apple Security Update: About the security content of macOS Big Sur 11.7.7 Product: macOS Big Sur Version: 11.7.7 CVE: CVE-2023-32355 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management.

CVE-2022-42819 [MEDIUM] CVE-2022-42819: macOS Big Sur 11.7 Apple Security Update: About the security content of macOS Big Sur 11.7 Product: macOS Big Sur Version: 11.7 CVE: CVE-2022-42819 Component: Calendar Impact: An app may be able to read sensitive location information Description: An access issue was addressed with improved access restrictions.

CVE-2022-42825 [MEDIUM] CVE-2022-42825: macOS Big Sur 11.7.1 Apple Security Update: About the security content of macOS Big Sur 11.7.1 Product: macOS Big Sur Version: 11.7.1 CVE: CVE-2022-42825 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed by removing additional entitlements.

CVE-2022-32877 [MEDIUM] CVE-2022-32877: macOS Big Sur 11.7 Apple Security Update: About the security content of macOS Big Sur 11.7 Product: macOS Big Sur Version: 11.7 CVE: CVE-2022-32877 Component: GarageBand Impact: An app may be able to access user-sensitive data Description: A configuration issue was addressed with additional restrictions.

CVE-2023-32395 [MEDIUM] CVE-2023-32395: macOS Big Sur 11.7.7 Apple Security Update: About the security content of macOS Big Sur 11.7.7 Product: macOS Big Sur Version: 11.7.7 CVE: CVE-2023-32395 Component: Perl Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management.

CVE-2023-23534 [MEDIUM] CVE-2023-23534: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-23534 Component: Carbon Core Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks.

CVE-2023-23542 [MEDIUM] CVE-2023-23542: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-23542 Component: System Settings Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2022-22650 [MEDIUM] CVE-2022-22650: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-22650 Component: QuickTime Player Impact: A plug-in may be able to inherit the application's permissions and access user data Description: This issue was addressed with improved checks.