Apple Macos Big Sur vulnerabilities

CVE-2022-26751 [HIGH] CVE-2022-26751: macOS Big Sur 11.6.6 Apple Security Update: About the security content of macOS Big Sur 11.6.6 Product: macOS Big Sur Version: 11.6.6 CVE: CVE-2022-26751 Component: AppleGraphicsControl Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation.

CVE-2021-30981 [HIGH] CVE-2021-30981: macOS Big Sur 11.6.2 Apple Security Update: About the security content of macOS Big Sur 11.6.2 Product: macOS Big Sur Version: 11.6.2 CVE: CVE-2021-30981 Component: Intel Graphics Driver Impact: An application may be able to execute arbitrary code with kernel privileges Description: A buffer overflow was addressed with improved bounds checking.

CVE-2021-30942 [HIGH] CVE-2021-30942: macOS Big Sur 11.6.2 Apple Security Update: About the security content of macOS Big Sur 11.6.2 Product: macOS Big Sur Version: 11.6.2 CVE: CVE-2021-30942 Component: ColorSync Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation.

CVE-2021-30928 [HIGH] CVE-2021-30928: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30928 Component: CoreGraphics Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation.

CVE-2021-30926 [HIGH] CVE-2021-30926: macOS Big Sur 11.6.1 Apple Security Update: About the security content of macOS Big Sur 11.6.1 Product: macOS Big Sur Version: 11.6.1 CVE: CVE-2021-30926 Component: ColorSync Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation.

CVE-2022-32813 [HIGH] CVE-2022-32813: macOS Big Sur 11.6.8 Apple Security Update: About the security content of macOS Big Sur 11.6.8 Product: macOS Big Sur Version: 11.6.8 CVE: CVE-2022-32813 Component: Kernel Impact: An app with root privileges may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2022-22582 [MEDIUM] CVE-2022-22582: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-22582 Component: WebKit Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A cookie management issue was addressed with improved state management.

CVE-2021-30856 [CRITICAL] CVE-2021-30856: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-30856 Component: TCC Impact: A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences Description: This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions.

CVE-2021-30975 [HIGH] CVE-2021-30975: macOS Big Sur 11.6.2 Apple Security Update: About the security content of macOS Big Sur 11.6.2 Product: macOS Big Sur Version: 11.6.2 CVE: CVE-2021-30975 Component: Script Editor Impact: A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions Description: This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary.

CVE-2021-30712 [HIGH] CVE-2021-30712: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30712 Component: Security Impact: Processing a maliciously crafted certificate may lead to arbitrary code execution Description: A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code.

CVE-2023-40398 [HIGH] CVE-2023-40398: macOS Big Sur 11.7.5 Apple Security Update: About the security content of macOS Big Sur 11.7.5 Product: macOS Big Sur Version: 11.7.5 CVE: CVE-2023-40398 Component: CoreServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: This issue was addressed with improved checks.

CVE-2022-22579 [HIGH] CVE-2022-22579: macOS Big Sur 11.6.3 Apple Security Update: About the security content of macOS Big Sur 11.6.3 Product: macOS Big Sur Version: 11.6.3 CVE: CVE-2022-22579 Component: Model I/O Impact: Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution Description: An information disclosure issue was addressed with improved state management.

CVE-2023-28319 [HIGH] CVE-2023-28319: macOS Big Sur 11.7.9 Apple Security Update: About the security content of macOS Big Sur 11.7.9 Product: macOS Big Sur Version: 11.7.9 CVE: CVE-2023-28319 Component: CVE-2023-28319

CVE-2021-30980 [HIGH] CVE-2021-30980: macOS Big Sur 11.6.2 Apple Security Update: About the security content of macOS Big Sur 11.6.2 Product: macOS Big Sur Version: 11.6.2 CVE: CVE-2021-30980 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management.

CVE-2021-30771 [HIGH] CVE-2021-30771: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30771 Component: FontParser Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation.

CVE-2022-22613 [HIGH] CVE-2022-22613: macOS Big Sur 11.6.5 Apple Security Update: About the security content of macOS Big Sur 11.6.5 Product: macOS Big Sur Version: 11.6.5 CVE: CVE-2022-22613 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2021-30881 [HIGH] CVE-2021-30881: macOS Big Sur 11.6.1 Apple Security Update: About the security content of macOS Big Sur 11.6.1 Product: macOS Big Sur Version: 11.6.1 CVE: CVE-2021-30881 Component: FileProvider Impact: Unpacking a maliciously crafted archive may lead to arbitrary code execution Description: An input validation issue was addressed with improved memory handling.

CVE-2021-30743 [HIGH] CVE-2021-30743: macOS Big Sur 11.3 Apple Security Update: About the security content of macOS Big Sur 11.3 Product: macOS Big Sur Version: 11.3 CVE: CVE-2021-30743 Component: ImageIO Impact: An out-of-bounds write was addressed with improved input validation Description: Processing a maliciously crafted image may lead to arbitrary code execution.

CVE-2022-32911 [HIGH] CVE-2022-32911: macOS Big Sur 11.7 Apple Security Update: About the security content of macOS Big Sur 11.7 Product: macOS Big Sur Version: 11.7 CVE: CVE-2022-32911 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2022-42800 [HIGH] CVE-2022-42800: macOS Big Sur 11.7.1 Apple Security Update: About the security content of macOS Big Sur 11.7.1 Product: macOS Big Sur Version: 11.7.1 CVE: CVE-2022-42800 Component: Sandbox Impact: An app with root privileges may be able to access private information Description: This issue was addressed with improved data protection.