Apple Macos Monterey vulnerabilities

CVE-2021-30931 [MEDIUM] CVE-2021-30931: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30931 Component: Bluetooth Impact: A malicious application may be able to disclose kernel memory Description: A logic issue was addressed with improved validation.

CVE-2021-30808 [MEDIUM] CVE-2021-30808: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30808 Component: Sandbox Impact: A malicious application may be able to modify protected parts of the file system Description: This issue was addressed with improved checks.

CVE-2021-30944 [MEDIUM] CVE-2021-30944: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30944 Component: SQLite Impact: A malicious app may be able to access data from other apps by enabling additional logging Description: A logic issue was addressed with improved state management.

CVE-2022-22676 [MEDIUM] CVE-2022-22676: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22676 Component: PackageKit Impact: An application may be able to delete files for which it does not have permission Description: An event handler validation issue in the XPC Services API was addressed by removing the service.

CVE-2022-32828 [MEDIUM] CVE-2022-32828: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32828 Component: CoreMedia Impact: An app may be able to disclose kernel memory Description: The issue was addressed with improved memory handling.

CVE-2022-32848 [MEDIUM] CVE-2022-32848: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32848 Component: Windows Server Impact: An app may be able to capture a user’s screen Description: A logic issue was addressed with improved checks.

CVE-2022-26727 [MEDIUM] CVE-2022-26727: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26727 Component: PackageKit Impact: A malicious application may be able to modify protected parts of the file system Description: This issue was addressed with improved entitlements.

CVE-2022-32834 [MEDIUM] CVE-2022-32834: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32834 Component: TCC Impact: An app may be able to access sensitive user information Description: An access issue was addressed with improvements to the sandbox.

CVE-2023-42860 [MEDIUM] CVE-2023-42860: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42860 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.

CVE-2022-32805 [MEDIUM] CVE-2022-32805: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32805 Component: Calendar Impact: An app may be able to access sensitive user information Description: The issue was addressed with improved handling of caches.

CVE-2023-42829 [MEDIUM] CVE-2023-42829: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-42829 Component: OpenSSH Impact: An app may be able to access SSH passphrases Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2023-42889 [MEDIUM] CVE-2023-42889: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42889 Component: PackageKit Impact: An app may be able to bypass certain Privacy preferences Description: The issue was addressed with improved checks.

CVE-2024-40800 [MEDIUM] CVE-2024-40800: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40800 Component: Restore Framework Impact: An app may be able to modify protected parts of the file system Description: An input validation issue was addressed with improved input validation.

CVE-2024-40806 [MEDIUM] CVE-2024-40806: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40806 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2022-22655 [MEDIUM] CVE-2022-22655: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22655 Component: Sandbox Impact: An app may be able to leak sensitive user information Description: An access issue was addressed with improvements to the sandbox.

CVE-2023-42894 [MEDIUM] CVE-2023-42894: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42894 Component: AppleEvents Impact: An app may be able to access information about a user's contacts Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-23533 [MEDIUM] CVE-2023-23533: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-23533 Component: Sandbox Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved checks.

CVE-2024-40816 [MEDIUM] CVE-2024-40816: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40816 Component: Kernel Impact: A local attacker may be able to cause unexpected system shutdown Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-23537 [MEDIUM] CVE-2023-23537: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-23537 Component: Find My Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2022-32825 [MEDIUM] CVE-2022-32825: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32825 Component: Audio Impact: An app may be able to disclose kernel memory Description: The issue was addressed with improved memory handling.