Apple Macos Monterey vulnerabilities

CVE-2024-27791 [HIGH] CVE-2024-27791: macOS Monterey 12.7.3 Apple Security Update: About the security content of macOS Monterey 12.7.3 Product: macOS Monterey Version: 12.7.3 CVE: CVE-2024-27791 Component: Power Manager Impact: An app may be able to corrupt coprocessor memory Description: The issue was addressed with improved checks.

CVE-2022-48578 [HIGH] CVE-2022-48578: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-48578 Component: AppleScript Impact: Processing an AppleScript may result in unexpected termination or disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2023-42914 [MEDIUM] CVE-2023-42914: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42914 Component: Kernel Impact: An app may be able to break out of its sandbox Description: The issue was addressed with improved memory handling.

CVE-2024-40817 [MEDIUM] CVE-2024-40817: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40817 Component: Safari Impact: Visiting a website that frames malicious content may lead to UI spoofing Description: The issue was addressed with improved UI handling.

CVE-2023-41968 [MEDIUM] CVE-2023-41968: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-41968 Component: Disk Management Impact: An app may be able to read arbitrary files Description: This issue was addressed with improved validation of symlinks.

CVE-2024-40827 [MEDIUM] CVE-2024-40827: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40827 Component: DesktopServices Impact: An app may be able to overwrite arbitrary files Description: The issue was addressed with improved checks.

CVE-2021-30813 [MEDIUM] CVE-2021-30813: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30813 Component: Login Window Impact: A person with access to a host Mac may be able to bypass the Login Window in Remote Desktop for a locked instance of macOS Description: A logic issue was addressed with improved checks.

CVE-2022-26766 [MEDIUM] CVE-2022-26766: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26766 Component: Security Impact: A malicious app may be able to bypass signature validation Description: A certificate parsing issue was addressed with improved checks.

CVE-2022-32786 [MEDIUM] CVE-2022-32786: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32786 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: An issue in the handling of environment variables was addressed with improved validation.

CVE-2022-32800 [MEDIUM] CVE-2022-32800: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32800 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved checks.

CVE-2022-29046 [MEDIUM] CVE-2022-29046: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-29046 Component: Spotlight Impact: An app may be able to gain root privileges Description: This issue was addressed with improved checks.

CVE-2022-22583 [MEDIUM] CVE-2022-22583: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22583 Component: PackageKit Impact: An application may be able to access restricted files Description: A permissions issue was addressed with improved validation.

CVE-2021-30912 [MEDIUM] CVE-2021-30912: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30912 Component: SoftwareUpdate Impact: A malicious application may gain access to a user's Keychain items Description: The issue was addressed with improved permissions logic.

CVE-2022-32838 [MEDIUM] CVE-2022-32838: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32838 Component: PluginKit Impact: An app may be able to read arbitrary files Description: A logic issue was addressed with improved state management.

CVE-2023-42888 [MEDIUM] CVE-2023-42888: macOS Monterey 12.7.3 Apple Security Update: About the security content of macOS Monterey 12.7.3 Product: macOS Monterey Version: 12.7.3 CVE: CVE-2023-42888 Component: ImageIO Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks.

CVE-2024-40796 [MEDIUM] CVE-2024-40796: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40796 Component: NetworkExtension Impact: Private browsing may leak some browsing history Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2021-30930 [MEDIUM] CVE-2021-30930: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30930 Component: WebRTC Impact: An attacker may be able to track users through their IP address Description: A logic issue was addressed with improved state management.

CVE-2023-32360 [MEDIUM] CVE-2023-32360: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32360 Component: CUPS Impact: An unauthenticated user may be able to access recently printed documents Description: An authentication issue was addressed with improved state management.

CVE-2024-27881 [MEDIUM] CVE-2024-27881: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-27881 Component: Scripting Bridge Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2024-40835 [MEDIUM] CVE-2024-40835: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40835 Component: Shortcuts Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: A logic issue was addressed with improved checks.