Apple Macos Big Sur vulnerabilities

CVE-2023-2426 [MEDIUM] CVE-2023-2426: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-2426 Component: CVE-2023-2426

CVE-2021-1861 [MEDIUM] CVE-2021-1861: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1861 Component: Safari Impact: A malicious website may be able to track users by setting state in a cache Description: An issue existed in determining cache occupancy. The issue was addressed through improved logic.

CVE-2021-30718 [MEDIUM] CVE-2021-30718: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30718 Component: SoftwareUpdate Impact: A non-privileged user may be able to modify restricted settings Description: This issue was addressed with improved checks.

CVE-2022-32781 [MEDIUM] CVE-2022-32781: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32781 Component: FaceTime Impact: An app with root privileges may be able to access private information Description: This issue was addressed by enabling hardened runtime.

CVE-2022-32857 [MEDIUM] CVE-2022-32857: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32857 Component: Software Update Impact: A user in a privileged network position can track a user’s activity Description: This issue was addressed by using HTTPS when sending information over the network.

CVE-2022-22647 [MEDIUM] CVE-2022-22647: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-22647 Component: Login Window Impact: A person with access to a Mac may be able to bypass Login Window Description: This issue was addressed with improved checks.

CVE-2023-28322 [LOW] CVE-2023-28322: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-28322 Component: CVE-2023-28322

CVE-2021-1824 [MEDIUM] CVE-2021-1824: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-1824 Component: Login Window Impact: A malicious application with root privileges may be able to access private information Description: This issue was addressed with improved entitlements.

CVE-2023-2609 [MEDIUM] CVE-2023-2609: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-2609 Component: CVE-2023-2609

CVE-2021-30702 [MEDIUM] CVE-2021-30702: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30702 Component: Login Window Impact: A person with physical access to a Mac may be able to bypass Login Window Description: A logic issue was addressed with improved state management.

CVE-2021-30668 [MEDIUM] CVE-2021-30668: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30668 Component: Software Update Impact: A person with physical access to a Mac may be able to bypass Login Window during a software update Description: This issue was addressed with improved checks.

CVE-2022-35252 [LOW] CVE-2022-35252: macOS Big Sur 11.7.3 Apple Security Update: About the security content of macOS Big Sur 11.7.3 Product: macOS Big Sur Version: 11.7.3 CVE: CVE-2022-35252 Component: CVE-2022-35252 Impact: Mounting a maliciously crafted Samba network share may lead to arbitrary code execution Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2022-32913 [LOW] CVE-2022-32913: macOS Big Sur 11.7 Apple Security Update: About the security content of macOS Big Sur 11.7 Product: macOS Big Sur Version: 11.7 CVE: CVE-2022-32913 Component: Image Processing Impact: A sandboxed app may be able to determine which app is currently using the camera Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2022-22656 [LOW] CVE-2022-22656: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-22656 Component: CVE-2022-22656

CVE-2023-23505 [LOW] CVE-2023-23505: macOS Big Sur 11.7.3 Apple Security Update: About the security content of macOS Big Sur 11.7.3 Product: macOS Big Sur Version: 11.7.3 CVE: CVE-2023-23505 Component: Screen Time Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-40442 [LOW] CVE-2023-40442: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-40442 Component: Accessibility Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2021-30671 [LOW] CVE-2021-30671: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30671 Component: TCC Impact: A malicious application may be able to send unauthorized Apple events to Finder Description: A validation issue was addressed with improved logic.

CVE-2023-28197 [LOW] CVE-2023-28197: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-28197 Component: Messages Impact: An app may be able to access user-sensitive data Description: An access issue was addressed with additional sandbox restrictions.

CVE-2021-30908 [LOW] CVE-2021-30908: macOS Big Sur 11.6.1 Apple Security Update: About the security content of macOS Big Sur 11.6.1 Product: macOS Big Sur Version: 11.6.1 CVE: CVE-2021-30908 Component: Windows Server Impact: A local attacker may be able to view the previous logged-in user’s desktop from the fast user switching screen Description: An authentication issue was addressed with improved state management.

CVE-2023-27928 [LOW] CVE-2023-27928: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-27928 Component: Identity Services Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries.