Apple Macos Monterey vulnerabilities

CVE-2022-22662 [MEDIUM] CVE-2022-22662: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22662 Component: WebKit Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A cookie management issue was addressed with improved state management.

CVE-2023-40420 [MEDIUM] CVE-2023-40420: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-40420 Component: CoreAnimation Impact: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved memory handling.

CVE-2023-40403 [MEDIUM] CVE-2023-40403: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-40403 Component: Kernel Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks.

CVE-2024-27823 [MEDIUM] CVE-2024-27823: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27823 Component: Kernel Impact: An attacker in a privileged network position may be able to spoof network packets Description: A race condition was addressed with improved locking.

CVE-2021-30995 [HIGH] CVE-2021-30995: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30995 Component: Preferences Impact: A malicious application may be able to elevate privileges Description: A race condition was addressed with improved state handling.

CVE-2022-32807 [HIGH] CVE-2022-32807: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32807 Component: Spindump Impact: An app may be able to overwrite arbitrary files Description: This issue was addressed with improved file handling.

CVE-2023-40452 [HIGH] CVE-2023-40452: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-40452 Component: Sandbox Impact: An app may be able to overwrite arbitrary files Description: The issue was addressed with improved bounds checks.

CVE-2021-30892 [MEDIUM] CVE-2021-30892: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30892 Component: Windows Server Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen Description: An authentication issue was addressed with improved state management.

CVE-2023-6277 [MEDIUM] CVE-2023-6277: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2023-6277 Component: CVE-2023-6277

CVE-2024-23216 [HIGH] CVE-2024-23216: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23216 Component: PackageKit Impact: An app may be able to overwrite arbitrary files Description: A path handling issue was addressed with improved validation.

CVE-2022-35260 [MEDIUM] CVE-2022-35260: macOS Monterey 12.6.3 Apple Security Update: About the security content of macOS Monterey 12.6.3 Product: macOS Monterey Version: 12.6.3 CVE: CVE-2022-35260 Component: CVE-2022-35260 Impact: Multiple issues in curl Description: Multiple issues were addressed by updating to curl version 7.85.0.

CVE-2022-22592 [MEDIUM] CVE-2022-22592: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22592 Component: WebKit Impact: Processing maliciously crafted web content may prevent Content Security Policy from being enforced Description: A logic issue was addressed with improved state management.

CVE-2023-41989 [MEDIUM] CVE-2023-41989: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-41989 Component: Emoji Impact: An attacker may be able to execute arbitrary code as root from the Lock Screen Description: The issue was addressed by restricting options offered on a locked device.

CVE-2024-2379 [MEDIUM] CVE-2024-2379: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-2379 Component: CVE-2024-2379

CVE-2022-22589 [MEDIUM] CVE-2022-22589: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22589 Component: WebKit Impact: Processing a maliciously crafted mail message may lead to running arbitrary javascript Description: A validation issue was addressed with improved input sanitization.

CVE-2022-22594 [MEDIUM] CVE-2022-22594: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22594 Component: WebKit Storage Impact: A website may be able to track sensitive user information Description: A cross-origin issue in the IndexDB API was addressed with improved input validation.

CVE-2024-27800 [MEDIUM] CVE-2024-27800: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27800 Component: Messages Impact: Processing a maliciously crafted message may lead to a denial-of-service Description: This issue was addressed by removing the vulnerable code.

CVE-2024-23218 [MEDIUM] CVE-2024-23218: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23218 Component: CoreCrypto Impact: An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key Description: A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions.

CVE-2022-26706 [MEDIUM] CVE-2022-26706: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26706 Component: LaunchServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions on third-party applications.

CVE-2023-0512 [HIGH] CVE-2023-0512: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-0512 Component: CVE-2023-0512