Apple Macos Monterey vulnerabilities

CVE-2021-30940 [MEDIUM] CVE-2021-30940: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30940 Component: Model I/O Impact: Processing a maliciously crafted USD file may disclose memory contents Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2023-32407 [MEDIUM] CVE-2023-32407: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32407 Component: Metal Impact: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved state management.

CVE-2021-30947 [MEDIUM] CVE-2021-30947: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30947 Component: Sandbox Impact: An application may be able to access a user's files Description: An access issue was addressed with additional sandbox restrictions.

CVE-2021-30973 [MEDIUM] CVE-2021-30973: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30973 Component: Model I/O Impact: Processing a maliciously crafted file may disclose user information Description: An out-of-bounds read was addressed with improved input validation.

CVE-2021-30911 [MEDIUM] CVE-2021-30911: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30911 Component: Model I/O Impact: Processing a maliciously crafted USD file may disclose memory contents Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2021-30831 [MEDIUM] CVE-2021-30831: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30831 Component: FontParser Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2024-27810 [MEDIUM] CVE-2024-27810: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27810 Component: Maps Impact: An app may be able to read sensitive location information Description: A path handling issue was addressed with improved validation.

CVE-2022-26746 [MEDIUM] CVE-2022-26746: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26746 Component: Printing Impact: A malicious application may be able to bypass Privacy preferences Description: This issue was addressed by removing the vulnerable code.

CVE-2024-27789 [MEDIUM] CVE-2024-27789: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27789 Component: Foundation Impact: An app may be able to access user-sensitive data Description: A logic issue was addressed with improved checks.

CVE-2022-32841 [MEDIUM] CVE-2022-32841: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32841 Component: ImageIO Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved memory handling.

CVE-2023-42823 [MEDIUM] CVE-2023-42823: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42823 Component: CVE-2023-42823

CVE-2023-42891 [MEDIUM] CVE-2023-42891: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42891 Component: IOKit Impact: An app may be able to monitor keystrokes without user permission Description: An authentication issue was addressed with improved state management.

CVE-2022-42789 [MEDIUM] CVE-2022-42789: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-42789 Component: AppleMobileFileIntegrity Impact: An app may be able to access user-sensitive data Description: An issue in code signature validation was addressed with improved checks.

CVE-2021-30904 [MEDIUM] CVE-2021-30904: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30904 Component: Messages Impact: A user's messages may continue to sync after the user has signed out of iMessage Description: A sync issue was addressed with improved state validation.

CVE-2022-42790 [MEDIUM] CVE-2022-42790: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-42790 Component: Sidecar Impact: A user may be able to view restricted content from the lock screen Description: A logic issue was addressed with improved state management.

CVE-2022-26707 [MEDIUM] CVE-2022-26707: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26707 Component: AppleMobileFileIntegrity Impact: A user may be able to view sensitive user information Description: An issue in the handling of environment variables was addressed with improved validation.

CVE-2021-30767 [MEDIUM] CVE-2021-30767: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30767 Component: TCC Impact: A local user may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management.

CVE-2024-27806 [MEDIUM] CVE-2024-27806: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27806 Component: CVE-2024-27806

CVE-2024-23283 [MEDIUM] CVE-2024-23283: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23283 Component: CVE-2024-23283

CVE-2024-27805 [MEDIUM] CVE-2024-27805: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27805 Component: Core Data Impact: An app may be able to access sensitive user data Description: An issue was addressed with improved validation of environment variables.