Apple Macos Monterey vulnerabilities

CVE-2022-26758 [HIGH] CWE-362 CVE-2022-26758: A malicious application may cause unexpected changes in memory shared between processes. A memory co A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.

CVE-2023-40420 [MEDIUM] CVE-2023-40420: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-40420 Component: CoreAnimation Impact: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved memory handling.

CVE-2022-22662 [MEDIUM] CVE-2022-22662: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22662 Component: WebKit Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A cookie management issue was addressed with improved state management.

CVE-2023-42974 [HIGH] CVE-2023-42974: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42974 Component: IOUSBDeviceFamily Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2022-26706 [MEDIUM] CVE-2022-26706: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26706 Component: LaunchServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions on third-party applications.

CVE-2024-27823 [MEDIUM] CVE-2024-27823: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27823 Component: Kernel Impact: An attacker in a privileged network position may be able to spoof network packets Description: A race condition was addressed with improved locking.

CVE-2021-30995 [HIGH] CVE-2021-30995: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30995 Component: Preferences Impact: A malicious application may be able to elevate privileges Description: A race condition was addressed with improved state handling.

CVE-2022-26726 [MEDIUM] CVE-2022-26726: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26726 Component: TCC Impact: An app may be able to capture a user's screen Description: This issue was addressed with improved checks.

CVE-2022-32807 [HIGH] CVE-2022-32807: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32807 Component: Spindump Impact: An app may be able to overwrite arbitrary files Description: This issue was addressed with improved file handling.

CVE-2020-19190 [MEDIUM] CVE-2020-19190: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2020-19190 Component: CVE-2020-19190 Impact: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: An access issue was addressed with improvements to the sandbox.

CVE-2023-40452 [HIGH] CVE-2023-40452: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-40452 Component: Sandbox Impact: An app may be able to overwrite arbitrary files Description: The issue was addressed with improved bounds checks.

CVE-2021-30892 [MEDIUM] CVE-2021-30892: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30892 Component: Windows Server Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen Description: An authentication issue was addressed with improved state management.

CVE-2024-2379 [MEDIUM] CVE-2024-2379: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-2379 Component: CVE-2024-2379

CVE-2023-41989 [MEDIUM] CVE-2023-41989: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-41989 Component: Emoji Impact: An attacker may be able to execute arbitrary code as root from the Lock Screen Description: The issue was addressed by restricting options offered on a locked device.

CVE-2022-22589 [MEDIUM] CVE-2022-22589: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22589 Component: WebKit Impact: Processing a maliciously crafted mail message may lead to running arbitrary javascript Description: A validation issue was addressed with improved input sanitization.

CVE-2024-27800 [MEDIUM] CVE-2024-27800: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27800 Component: Messages Impact: Processing a maliciously crafted message may lead to a denial-of-service Description: This issue was addressed by removing the vulnerable code.

CVE-2022-32799 [MEDIUM] CVE-2022-32799: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32799 Component: SMB Impact: A user in a privileged network position may be able to leak sensitive information Description: An out-of-bounds read issue was addressed with improved bounds checking.

CVE-2024-23218 [MEDIUM] CVE-2024-23218: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23218 Component: CoreCrypto Impact: An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key Description: A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions.

CVE-2023-0512 [HIGH] CVE-2023-0512: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-0512 Component: CVE-2023-0512

CVE-2020-19189 [MEDIUM] CVE-2020-19189: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2020-19189 Component: CVE-2020-19189