Apple Macos Monterey vulnerabilities

CVE-2021-30927 [HIGH] CVE-2021-30927: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30927 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management.

CVE-2023-36854 [HIGH] CVE-2023-36854: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-36854 Component: Grapher Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2022-22669 [HIGH] CVE-2022-22669: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22669 Component: AMD Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management.

CVE-2024-40828 [HIGH] CVE-2024-40828: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40828 Component: Disk Management Impact: A malicious app may be able to gain root privileges Description: The issue was addressed with improved checks.

CVE-2023-27936 [HIGH] CVE-2023-27936: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27936 Component: CommCenter Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2023-27946 [HIGH] CVE-2023-27946: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27946 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2023-23516 [HIGH] CVE-2023-23516: macOS Monterey 12.6.3 Apple Security Update: About the security content of macOS Monterey 12.6.3 Product: macOS Monterey Version: 12.6.3 CVE: CVE-2023-23516 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2023-32401 [HIGH] CVE-2023-32401: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32401 Component: Quick Look Impact: Parsing an office document may lead to an unexpected app termination or arbitrary code execution Description: A buffer overflow was addressed with improved bounds checking.

CVE-2022-32900 [HIGH] CVE-2022-32900: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32900 Component: PackageKit Impact: An app may be able to gain elevated privileges Description: A logic issue was addressed with improved state management.

CVE-2023-32378 [HIGH] CVE-2023-32378: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-32378 Component: IOAcceleratorFamily Impact: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management.

CVE-2024-23261 [HIGH] CVE-2024-23261: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-23261 Component: Time Zone Impact: An attacker may be able to read information belonging to another user Description: A logic issue was addressed with improved state management.

CVE-2023-32397 [HIGH] CVE-2023-32397: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32397 Component: Shell Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management.

CVE-2023-32444 [HIGH] CVE-2023-32444: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-32444 Component: NSSpellChecker Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved validation.

CVE-2022-32882 [CRITICAL] CVE-2022-32882: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-32882 Component: Libinfo Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved checks.

CVE-2023-40440 [HIGH] CVE-2023-40440: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-40440 Component: Mail Impact: A S/MIME encrypted email may be inadvertently sent unencrypted Description: This issue was addressed with improved state management of S/MIME encrypted emails.

CVE-2023-42849 [MEDIUM] CVE-2023-42849: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42849 Component: Kernel Impact: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations Description: The issue was addressed with improved memory handling.

CVE-2021-30955 [HIGH] CVE-2021-30955: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30955 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2023-29491 [MEDIUM] CVE-2023-29491: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-29491 Component: CVE-2023-1916 Impact: An app may cause unexpected app termination or arbitrary code execution Description: A memory corruption issue was addressed with improved validation.

CVE-2024-23299 [HIGH] CVE-2024-23299: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23299 Component: Disk Images Impact: An app may be able to break out of its sandbox Description: The issue was addressed with improved checks.

CVE-2022-2000 [HIGH] CVE-2022-2000: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-2000 Component: CVE-2022-2000