Apple Macos Monterey vulnerabilities

CVE-2023-32382 [MEDIUM] CVE-2023-32382: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32382 Component: Model I/O Impact: Processing a 3D model may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2022-32902 [MEDIUM] CVE-2022-32902: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32902 Component: ATS Impact: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved state management.

CVE-2023-32403 [MEDIUM] CVE-2023-32403: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32403 Component: NetworkExtension Impact: An app may be able to read sensitive location information Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-40807 [MEDIUM] CVE-2024-40807: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40807 Component: Shortcuts Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: A logic issue was addressed with improved checks.

CVE-2023-40389 [MEDIUM] CVE-2023-40389: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2023-40389 Component: Transparency Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved restriction of data container access.

CVE-2023-42834 [MEDIUM] CVE-2023-42834: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42834 Component: Find My Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved handling of files.

CVE-2022-32896 [MEDIUM] CVE-2022-32896: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32896 Component: Image Processing Impact: A sandboxed app may be able to determine which app is currently using the camera Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2021-28544 [MEDIUM] CVE-2021-28544: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2021-28544 Component: Spotlight Impact: An app may be able to gain root privileges Description: This issue was addressed with improved checks.

CVE-2022-26755 [MEDIUM] CVE-2022-26755: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26755 Component: Tcl Impact: A malicious application may be able to break out of its sandbox Description: This issue was addressed with improved environment sanitization.

CVE-2023-27945 [MEDIUM] CVE-2023-27945: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-27945 Component: Dev Tools Impact: A sandboxed app may be able to collect system logs Description: This issue was addressed with improved entitlements.

CVE-2024-27877 [MEDIUM] CVE-2024-27877: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-27877 Component: AppleVA Impact: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents Description: The issue was addressed with improved memory handling.

CVE-2023-32369 [MEDIUM] CVE-2023-32369: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32369 Component: LaunchServices Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks.

CVE-2021-30913 [MEDIUM] CVE-2021-30913: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30913 Component: SoftwareUpdate Impact: An unprivileged application may be able to edit NVRAM variables Description: A logic issue was addressed with improved restrictions.

CVE-2021-30861 [MEDIUM] CVE-2021-30861: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30861 Component: WebKit Impact: A malicious application may bypass Gatekeeper checks Description: A logic issue was addressed with improved state management.

CVE-2022-26712 [MEDIUM] CVE-2022-26712: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26712 Component: PackageKit Impact: A malicious application may be able to modify protected parts of the file system Description: This issue was addressed by removing the vulnerable code.

CVE-2021-30946 [MEDIUM] CVE-2021-30946: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2021-30946 Component: LaunchServices Impact: An app may be able to bypass certain Privacy preferences Description: A logic issue was addressed with improved restrictions.

CVE-2022-26728 [MEDIUM] CVE-2022-26728: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26728 Component: SoftwareUpdate Impact: A malicious application may be able to access restricted files Description: This issue was addressed with improved entitlements.

CVE-2021-31007 [MEDIUM] CVE-2021-31007: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-31007 Component: File Provider Impact: A malicious application may be able to bypass Privacy preferences Description: A permissions issue was addressed with improved validation.

CVE-2021-30964 [MEDIUM] CVE-2021-30964: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30964 Component: TCC Impact: A malicious application may be able to bypass Privacy preferences Description: An inherited permissions issue was addressed with additional restrictions.

CVE-2022-32817 [MEDIUM] CVE-2022-32817: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32817 Component: Kernel Impact: An app may be able to disclose kernel memory Description: An out-of-bounds read issue was addressed with improved bounds checking.