Apple Macos Monterey vulnerabilities

CVE-2022-42819 [MEDIUM] CVE-2022-42819: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-42819 Component: Calendar Impact: An app may be able to read sensitive location information Description: An access issue was addressed with improved access restrictions.

CVE-2024-23229 [MEDIUM] CVE-2024-23229: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-23229 Component: Find My Impact: A malicious application may be able to access Find My data Description: This issue was addressed with improved redaction of sensitive information.

CVE-2021-30986 [MEDIUM] CVE-2021-30986: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30986 Component: Bluetooth Impact: A device may be passively tracked by its Bluetooth MAC address Description: A device configuration issue was addressed with an updated configuration.

CVE-2022-42825 [MEDIUM] CVE-2022-42825: macOS Monterey 12.6.1 Apple Security Update: About the security content of macOS Monterey 12.6.1 Product: macOS Monterey Version: 12.6.1 CVE: CVE-2022-42825 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed by removing additional entitlements.

CVE-2022-32877 [MEDIUM] CVE-2022-32877: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32877 Component: GarageBand Impact: An app may be able to access user-sensitive data Description: A configuration issue was addressed with additional restrictions.

CVE-2023-32395 [MEDIUM] CVE-2023-32395: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32395 Component: Perl Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management.

CVE-2021-30987 [MEDIUM] CVE-2021-30987: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30987 Component: Airport Impact: A device may be passively tracked via BSSIDs Description: An access issue was addressed with improved access restrictions.

CVE-2023-28826 [MEDIUM] CVE-2023-28826: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2023-28826 Component: MediaRemote Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-32368 [MEDIUM] CVE-2023-32368: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32368 Component: Model I/O Impact: Processing a 3D model may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-23542 [MEDIUM] CVE-2023-23542: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-23542 Component: System Settings Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2022-22650 [MEDIUM] CVE-2022-22650: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22650 Component: QuickTime Player Impact: A plug-in may be able to inherit the application's permissions and access user data Description: This issue was addressed with improved checks.

CVE-2024-23269 [MEDIUM] CVE-2024-23269: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23269 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2023-32408 [MEDIUM] CVE-2023-32408: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32408 Component: TV App Impact: An app may be able to read sensitive location information Description: The issue was addressed with improved handling of caches.

CVE-2023-32410 [MEDIUM] CVE-2023-32410: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32410 Component: IOSurface Impact: An app may be able to leak sensitive kernel state Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-32392 [MEDIUM] CVE-2023-32392: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32392 Component: GeoServices Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-27942 [MEDIUM] CVE-2023-27942: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27942 Component: Podcasts Impact: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks.

CVE-2023-42840 [MEDIUM] CVE-2023-42840: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42840 Component: PackageKit Impact: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks.

CVE-2023-32388 [MEDIUM] CVE-2023-32388: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32388 Component: Accessibility Impact: An app may be able to bypass Privacy preferences Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-32375 [MEDIUM] CVE-2023-32375: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32375 Component: Model I/O Impact: Processing a 3D model may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-27961 [MEDIUM] CVE-2023-27961: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-27961 Component: Calendar Impact: Importing a maliciously crafted calendar invitation may exfiltrate user information Description: Multiple validation issues were addressed with improved input sanitization.