Apple Macos Monterey vulnerabilities

CVE-2021-30996 [HIGH] CVE-2021-30996: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30996 Component: IOMobileFrameBuffer Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2021-30923 [HIGH] CVE-2021-30923: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30923 Component: File System Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved locking.

CVE-2022-22638 [MEDIUM] CVE-2022-22638: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22638 Component: Kernel Impact: An attacker in a privileged position may be able to perform a denial of service attack Description: A null pointer dereference was addressed with improved validation.

CVE-2024-40787 [HIGH] CVE-2024-40787: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40787 Component: Shortcuts Impact: A shortcut may be able to bypass Internet permission requirements Description: This issue was addressed by adding an additional prompt for user consent.

CVE-2024-40774 [HIGH] CVE-2024-40774: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40774 Component: AppleMobileFileIntegrity Impact: An app may be able to bypass Privacy preferences Description: A downgrade issue was addressed with additional code-signing restrictions.

CVE-2023-32413 [HIGH] CVE-2023-32413: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32413 Component: Kernel Impact: An app may be able to gain root privileges Description: A race condition was addressed with improved state handling.

CVE-2022-26743 [HIGH] CVE-2022-26743: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26743 Component: Kernel Impact: An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-42803 [HIGH] CVE-2022-42803: macOS Monterey 12.6.1 Apple Security Update: About the security content of macOS Monterey 12.6.1 Product: macOS Monterey Version: 12.6.1 CVE: CVE-2022-42803 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved locking.

CVE-2023-42974 [HIGH] CVE-2023-42974: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42974 Component: IOUSBDeviceFamily Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2024-23234 [MEDIUM] CVE-2024-23234: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23234 Component: Intel Graphics Driver Impact: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2023-27933 [MEDIUM] CVE-2023-27933: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27933 Component: Kernel Impact: An app with root privileges may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2023-28321 [MEDIUM] CVE-2023-28321: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-28321 Component: CVE-2023-28321

CVE-2023-42961 [MEDIUM] CVE-2023-42961: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-42961 Component: Intents Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A path handling issue was addressed with improved validation.

CVE-2023-2610 [HIGH] CVE-2023-2610: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-2610 Component: CVE-2023-2610

CVE-2022-26726 [MEDIUM] CVE-2022-26726: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26726 Component: TCC Impact: An app may be able to capture a user's screen Description: This issue was addressed with improved checks.

CVE-2021-30868 [HIGH] CVE-2021-30868: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30868 Component: SMB Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved locking.

CVE-2021-30933 [HIGH] CVE-2021-30933: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30933 Component: Graphics Drivers Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2021-30897 [MEDIUM] CVE-2021-30897: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30897 Component: WebKit Impact: A malicious website may exfiltrate data cross-origin Description: An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented.

CVE-2021-30887 [MEDIUM] CVE-2021-30887: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30887 Component: WebKit Impact: Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy Description: A logic issue was addressed with improved restrictions.

CVE-2022-26758 [HIGH] CWE-362 CVE-2022-26758: A malicious application may cause unexpected changes in memory shared between processes. A memory co A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.