Apple Macos Monterey vulnerabilities

CVE-2023-32434 [HIGH] CVE-2023-32434: macOS Monterey 12.6.7 Apple Security Update: About the security content of macOS Monterey 12.6.7 Product: macOS Monterey Version: 12.6.7 CVE: CVE-2023-32434 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Description: An integer overflow was addressed with improved input validation.

CVE-2022-22620 [HIGH] CVE-2022-22620: macOS Monterey 12.2.1 Apple Security Update: About the security content of macOS Monterey 12.2.1 Product: macOS Monterey Version: 12.2.1 CVE: CVE-2022-22620 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management.

CVE-2023-28206 [HIGH] CVE-2023-28206: macOS Monterey 12.6.5 Apple Security Update: About the security content of macOS Monterey 12.6.5 Product: macOS Monterey Version: 12.6.5 CVE: CVE-2023-28206 Component: IOSurfaceAccelerator Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2024-23222 [HIGH] CVE-2024-23222: macOS Monterey 12.7.3 Apple Security Update: About the security content of macOS Monterey 12.7.3 Product: macOS Monterey Version: 12.7.3 CVE: CVE-2024-23222 Component: CVE-2024-23222

CVE-2023-41064 [HIGH] CVE-2023-41064: macOS Monterey 12.6.9 Apple Security Update: About the security content of macOS Monterey 12.6.9 Product: macOS Monterey Version: 12.6.9 CVE: CVE-2023-41064 Component: ImageIO Impact: Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2021-30883 [HIGH] CVE-2021-30883: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30883 Component: IOMobileFrameBuffer Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2022-2294 [HIGH] CVE-2022-2294: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-2294 Component: WebRTC Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved state management.

CVE-2022-32893 [HIGH] CVE-2022-32893: macOS Monterey 12.5.1 Apple Security Update: About the security content of macOS Monterey 12.5.1 Product: macOS Monterey Version: 12.5.1 CVE: CVE-2022-32893 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22587 [CRITICAL] CVE-2022-22587: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22587 Component: IOMobileFrameBuffer Impact: A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: A memory corruption issue was addressed with improved input validation.

CVE-2022-48503 [HIGH] CVE-2022-48503: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-48503 Component: JavaScriptCore Impact: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved bounds checks.

CVE-2022-22675 [HIGH] CVE-2022-22675: macOS Monterey 12.3.1 Apple Security Update: About the security content of macOS Monterey 12.3.1 Product: macOS Monterey Version: 12.3.1 CVE: CVE-2022-22675 Component: AppleAVD Impact: An application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking. Apple is aware of a report that this issue may have been actively exploited.

CVE-2021-30952 [HIGH] CVE-2021-30952: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30952 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: An integer overflow was addressed with improved input validation.

CVE-2022-32894 [HIGH] CVE-2022-32894: macOS Monterey 12.5.1 Apple Security Update: About the security content of macOS Monterey 12.5.1 Product: macOS Monterey Version: 12.5.1 CVE: CVE-2022-32894 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-32917 [HIGH] CVE-2022-32917: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32917 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: The issue was addressed with improved bounds checks.

CVE-2023-41990 [HIGH] CVE-2023-41990: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-41990 Component: FontParser Impact: Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. Description: The issue was addressed with improved handling of caches.

CVE-2023-41992 [HIGH] CVE-2023-41992: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-41992 Component: Kernel Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks.

CVE-2024-23225 [HIGH] CVE-2024-23225: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23225 Component: CVE-2024-23225 Impact: An app may be able to cause a denial-of-service Description: A permissions issue was addressed with additional restrictions.

CVE-2024-23296 [HIGH] CVE-2024-23296: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-23296 Component: CVE-2024-23296

CVE-2023-38606 [MEDIUM] CVE-2023-38606: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-38606 Component: Kernel Impact: An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. Description: This issue was addressed with improved state management.

CVE-2022-22674 [MEDIUM] CVE-2022-22674: macOS Monterey 12.3.1 Apple Security Update: About the security content of macOS Monterey 12.3.1 Product: macOS Monterey Version: 12.3.1 CVE: CVE-2022-22674 Component: Intel Graphics Driver Impact: An application may be able to read kernel memory Description: An out-of-bounds read issue may lead to the disclosure of kernel memory and was addressed with improved input validation. Apple is aware of a report that this issue may have been actively exploited.