Apple Macos Monterey vulnerabilities

CVE-2023-40440 [HIGH] CVE-2023-40440: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-40440 Component: Mail Impact: A S/MIME encrypted email may be inadvertently sent unencrypted Description: This issue was addressed with improved state management of S/MIME encrypted emails.

CVE-2022-32882 [CRITICAL] CVE-2022-32882: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-32882 Component: Libinfo Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved checks.

CVE-2023-42849 [MEDIUM] CVE-2023-42849: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42849 Component: Kernel Impact: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations Description: The issue was addressed with improved memory handling.

CVE-2021-30955 [HIGH] CVE-2021-30955: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30955 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2023-27944 [HIGH] CVE-2023-27944: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27944 Component: XPC Impact: An app may be able to break out of its sandbox Description: This issue was addressed with a new entitlement.

CVE-2022-2000 [HIGH] CVE-2022-2000: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-2000 Component: CVE-2022-2000

CVE-2023-32443 [HIGH] CVE-2023-32443: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-32443 Component: Shortcuts Impact: A shortcut may be able to modify sensitive Shortcuts app settings Description: An access issue was addressed with improved access restrictions.

CVE-2022-22664 [HIGH] CVE-2022-22664: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22664 Component: GarageBand MIDI Impact: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2021-30821 [HIGH] CVE-2021-30821: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30821 Component: IOGraphics Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2022-26770 [HIGH] CVE-2022-26770: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26770 Component: Intel Graphics Driver Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2022-32801 [HIGH] CVE-2022-32801: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32801 Component: Spotlight Impact: An app may be able to gain root privileges Description: This issue was addressed with improved checks.

CVE-2022-26761 [HIGH] CVE-2022-26761: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26761 Component: Wi-Fi Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2022-22612 [HIGH] CVE-2022-22612: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22612 Component: ImageIO Impact: Processing a maliciously crafted image may lead to heap corruption Description: A memory consumption issue was addressed with improved memory handling.

CVE-2022-26718 [HIGH] CVE-2022-26718: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26718 Component: SMB Impact: An application may be able to gain elevated privileges Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2022-0351 [HIGH] CVE-2022-0351: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-0351 Component: CVE-2022-0351

CVE-2022-22609 [HIGH] CVE-2022-22609: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22609 Component: Preferences Impact: A malicious application may be able to read other applications' settings Description: The issue was addressed with additional permissions checks.

CVE-2022-22643 [HIGH] CVE-2022-22643: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22643 Component: FaceTime Impact: A user may send audio and video in a FaceTime call without knowing that they have done so Description: This issue was addressed with improved checks.

CVE-2022-32811 [HIGH] CVE-2022-32811: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32811 Component: Intel Graphics Driver Impact: An app may be able to execute arbitrary code with kernel privileges Description: A memory corruption vulnerability was addressed with improved locking.

CVE-2023-5344 [HIGH] CVE-2023-5344: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-5344 Component: CVE-2023-5344

CVE-2022-26762 [HIGH] CVE-2022-26762: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26762 Component: Wi-Fi Impact: A malicious application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling.