Apple Macos Monterey vulnerabilities

CVE-2022-32866 [HIGH] CVE-2022-32866: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32866 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2022-0392 [HIGH] CVE-2022-0392: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-0392 Component: CVE-2022-0392

CVE-2022-0261 [HIGH] CVE-2022-0261: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-0261 Component: CVE-2022-0261

CVE-2022-2126 [HIGH] CVE-2022-2126: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-2126 Component: CVE-2022-2126

CVE-2022-0359 [HIGH] CVE-2022-0359: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-0359 Component: CVE-2022-0359

CVE-2022-32924 [HIGH] CVE-2022-32924: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32924 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2022-32917 [HIGH] CVE-2022-32917: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32917 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: The issue was addressed with improved bounds checks.

CVE-2022-2125 [HIGH] CVE-2022-2125: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-2125 Component: CVE-2022-2125

CVE-2022-32900 [HIGH] CVE-2022-32900: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32900 Component: PackageKit Impact: An app may be able to gain elevated privileges Description: A logic issue was addressed with improved state management.

CVE-2022-32881 [MEDIUM] CVE-2022-32881: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32881 Component: Sandbox Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved restrictions.

CVE-2022-32875 [MEDIUM] CVE-2022-32875: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32875 Component: Weather Impact: An app may be able to read sensitive location information Description: A logic issue was addressed with improved state management.

CVE-2022-1622 [MEDIUM] CVE-2022-1622: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-1622 Component: CVE-2022-1622

CVE-2022-42818 [MEDIUM] CVE-2022-42818: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-42818 Component: Notes Impact: A user in a privileged network position may be able to track user activity Description: This issue was addressed with improved data protection.

CVE-2022-32877 [MEDIUM] CVE-2022-32877: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32877 Component: GarageBand Impact: An app may be able to access user-sensitive data Description: A configuration issue was addressed with additional restrictions.

CVE-2022-42790 [MEDIUM] CVE-2022-42790: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-42790 Component: Sidecar Impact: A user may be able to view restricted content from the lock screen Description: A logic issue was addressed with improved state management.

CVE-2022-32896 [MEDIUM] CVE-2022-32896: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32896 Component: Image Processing Impact: A sandboxed app may be able to determine which app is currently using the camera Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2022-32902 [MEDIUM] CVE-2022-32902: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32902 Component: ATS Impact: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved state management.

CVE-2022-32864 [MEDIUM] CVE-2022-32864: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32864 Component: Kernel Impact: An app may be able to disclose kernel memory Description: The issue was addressed with improved memory handling.

CVE-2022-32904 [MEDIUM] CVE-2022-32904: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32904 Component: ATS Impact: An app may be able to access user-sensitive data Description: An access issue was addressed with additional sandbox restrictions.

CVE-2022-42819 [MEDIUM] CVE-2022-42819: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-42819 Component: Calendar Impact: An app may be able to read sensitive location information Description: An access issue was addressed with improved access restrictions.