Apple Macos Monterey vulnerabilities

CVE-2021-30966 [HIGH] CVE-2021-30966: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30966 Component: CFNetwork Proxies Impact: User traffic might unexpectedly be leaked to a proxy server despite PAC configurations Description: A logic issue was addressed with improved state management.

CVE-2023-42844 [HIGH] CVE-2023-42844: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42844 Component: Foundation Impact: A website may be able to access sensitive user data when resolving symlinks Description: This issue was addressed with improved handling of symlinks.

CVE-2023-32428 [HIGH] CVE-2023-32428: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32428 Component: MallocStackLogging Impact: An app may be able to gain root privileges Description: This issue was addressed with improved file handling.

CVE-2022-32812 [HIGH] CVE-2022-32812: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32812 Component: Intel Graphics Driver Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2022-32840 [HIGH] CVE-2022-32840: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32840 Impact: An app may be able to execute arbitrary code with kernel privileges Description: This issue was addressed with improved checks.

CVE-2021-30927 [HIGH] CVE-2021-30927: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30927 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management.

CVE-2023-36854 [HIGH] CVE-2023-36854: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-36854 Component: Grapher Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2022-42805 [HIGH] CVE-2022-42805: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-42805 Impact: An app may be able to execute arbitrary code with kernel privileges Description: An integer overflow was addressed with improved input validation.

CVE-2024-40828 [HIGH] CVE-2024-40828: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40828 Component: Disk Management Impact: A malicious app may be able to gain root privileges Description: The issue was addressed with improved checks.

CVE-2024-27796 [HIGH] CVE-2024-27796: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27796 Component: Voice Control Impact: A user may be able to elevate privileges Description: The issue was addressed with improved checks.

CVE-2023-27936 [HIGH] CVE-2023-27936: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27936 Component: CommCenter Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2023-27946 [HIGH] CVE-2023-27946: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27946 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2023-27949 [HIGH] CVE-2023-27949: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27949 Component: Model I/O Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-23507 [HIGH] CVE-2023-23507: macOS Monterey 12.6.3 Apple Security Update: About the security content of macOS Monterey 12.6.3 Product: macOS Monterey Version: 12.6.3 CVE: CVE-2023-23507 Component: Intel Graphics Driver Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved bounds checks.

CVE-2023-32401 [HIGH] CVE-2023-32401: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32401 Component: Quick Look Impact: Parsing an office document may lead to an unexpected app termination or arbitrary code execution Description: A buffer overflow was addressed with improved bounds checking.

CVE-2022-32900 [HIGH] CVE-2022-32900: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32900 Component: PackageKit Impact: An app may be able to gain elevated privileges Description: A logic issue was addressed with improved state management.

CVE-2022-32910 [HIGH] CVE-2022-32910: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32910 Component: Archive Utility Impact: An archive may be able to bypass Gatekeeper Description: A logic issue was addressed with improved checks.

CVE-2024-23261 [HIGH] CVE-2024-23261: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-23261 Component: Time Zone Impact: An attacker may be able to read information belonging to another user Description: A logic issue was addressed with improved state management.

CVE-2023-32397 [HIGH] CVE-2023-32397: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32397 Component: Shell Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management.

CVE-2023-32444 [HIGH] CVE-2023-32444: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-32444 Component: NSSpellChecker Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved validation.