Apple Macos Monterey vulnerabilities

CVE-2021-30990 [MEDIUM] CVE-2021-30990: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30990 Component: LaunchServices Impact: A malicious application may bypass Gatekeeper checks Description: A logic issue was addressed with improved validation.

CVE-2022-32818 [MEDIUM] CVE-2022-32818: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32818 Component: SMB Impact: An app may be able to leak sensitive kernel state Description: The issue was addressed with improved memory handling.

CVE-2021-30808 [MEDIUM] CVE-2021-30808: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30808 Component: Sandbox Impact: A malicious application may be able to modify protected parts of the file system Description: This issue was addressed with improved checks.

CVE-2021-30931 [MEDIUM] CVE-2021-30931: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30931 Component: Bluetooth Impact: A malicious application may be able to disclose kernel memory Description: A logic issue was addressed with improved validation.

CVE-2021-30944 [MEDIUM] CVE-2021-30944: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30944 Component: SQLite Impact: A malicious app may be able to access data from other apps by enabling additional logging Description: A logic issue was addressed with improved state management.

CVE-2022-22676 [MEDIUM] CVE-2022-22676: macOS Monterey 12.2 Apple Security Update: About the security content of macOS Monterey 12.2 Product: macOS Monterey Version: 12.2 CVE: CVE-2022-22676 Component: PackageKit Impact: An application may be able to delete files for which it does not have permission Description: An event handler validation issue in the XPC Services API was addressed by removing the service.

CVE-2022-22644 [MEDIUM] CVE-2022-22644: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22644 Component: NSSpellChecker Impact: A malicious application may be able to access information about a user's contacts Description: A privacy issue existed in the handling of Contact cards. This was addressed with improved state management.

CVE-2022-32848 [MEDIUM] CVE-2022-32848: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32848 Component: Windows Server Impact: An app may be able to capture a user’s screen Description: A logic issue was addressed with improved checks.

CVE-2022-32834 [MEDIUM] CVE-2022-32834: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32834 Component: TCC Impact: An app may be able to access sensitive user information Description: An access issue was addressed with improvements to the sandbox.

CVE-2023-42860 [MEDIUM] CVE-2023-42860: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42860 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.

CVE-2023-42829 [MEDIUM] CVE-2023-42829: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-42829 Component: OpenSSH Impact: An app may be able to access SSH passphrases Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2023-42889 [MEDIUM] CVE-2023-42889: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42889 Component: PackageKit Impact: An app may be able to bypass certain Privacy preferences Description: The issue was addressed with improved checks.

CVE-2024-40800 [MEDIUM] CVE-2024-40800: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40800 Component: Restore Framework Impact: An app may be able to modify protected parts of the file system Description: An input validation issue was addressed with improved input validation.

CVE-2024-40806 [MEDIUM] CVE-2024-40806: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40806 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2022-22655 [MEDIUM] CVE-2022-22655: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22655 Component: Sandbox Impact: An app may be able to leak sensitive user information Description: An access issue was addressed with improvements to the sandbox.

CVE-2023-42894 [MEDIUM] CVE-2023-42894: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42894 Component: AppleEvents Impact: An app may be able to access information about a user's contacts Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-23533 [MEDIUM] CVE-2023-23533: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-23533 Component: Sandbox Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved checks.

CVE-2022-32825 [MEDIUM] CVE-2022-32825: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32825 Component: Audio Impact: An app may be able to disclose kernel memory Description: The issue was addressed with improved memory handling.

CVE-2022-32881 [MEDIUM] CVE-2022-32881: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32881 Component: Sandbox Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved restrictions.

CVE-2022-32849 [MEDIUM] CVE-2022-32849: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32849 Component: GPU Drivers Impact: An app may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved validation.