Apple Macos Monterey vulnerabilities

CVE-2022-32875 [MEDIUM] CVE-2022-32875: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32875 Component: Weather Impact: An app may be able to read sensitive location information Description: A logic issue was addressed with improved state management.

CVE-2022-32785 [MEDIUM] CVE-2022-32785: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32785 Component: ImageIO Impact: Processing an image may lead to a denial-of-service Description: A null pointer dereference was addressed with improved validation.

CVE-2022-22660 [MEDIUM] CVE-2022-22660: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22660 Component: System Preferences Impact: An app may be able to spoof system notifications and UI Description: This issue was addressed with a new entitlement.

CVE-2023-28185 [MEDIUM] CVE-2023-28185: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-28185 Component: Kernel Impact: An app may be able to cause a denial-of-service Description: An integer overflow was addressed through improved input validation.

CVE-2022-29048 [MEDIUM] CVE-2022-29048: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-29048 Component: Spotlight Impact: An app may be able to gain root privileges Description: This issue was addressed with improved checks.

CVE-2023-41975 [MEDIUM] CVE-2023-41975: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-41975 Component: WindowServer Impact: A website may be able to access the microphone without the microphone use indicator being shown Description: This issue was addressed by removing the vulnerable code.

CVE-2023-42854 [MEDIUM] CVE-2023-42854: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42854 Component: FileProvider Impact: An app may be able to cause a denial-of-service to Endpoint Security clients Description: This issue was addressed by removing the vulnerable code.

CVE-2024-23201 [MEDIUM] CVE-2024-23201: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23201 Component: CVE-2024-23225 Impact: An app may be able to cause a denial-of-service Description: A permissions issue was addressed with additional restrictions.

CVE-2023-38593 [MEDIUM] CVE-2023-38593: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-38593 Component: Kernel Impact: A remote user may be able to cause a denial-of-service Description: The issue was addressed with improved checks.

CVE-2024-23275 [MEDIUM] CVE-2024-23275: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23275 Component: PackageKit Impact: An app may be able to access protected user data Description: A race condition was addressed with additional validation.

CVE-2022-46713 [MEDIUM] CVE-2022-46713: macOS Monterey 12.6.1 Apple Security Update: About the security content of macOS Monterey 12.6.1 Product: macOS Monterey Version: 12.6.1 CVE: CVE-2022-46713 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A race condition was addressed with additional validation.

CVE-2022-26731 [MEDIUM] CVE-2022-26731: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-26731 Component: Safari Private Browsing Impact: A malicious website may be able to track users in Safari private browsing mode Description: A logic issue was addressed with improved state management.

CVE-2021-30943 [MEDIUM] CVE-2021-30943: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-30943 Component: Messages Impact: A malicious user may be able to leave a messages group but continue to receive messages in that group Description: An issue in the handling of group membership was resolved with improved logic.

CVE-2022-26688 [MEDIUM] CVE-2022-26688: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-26688 Component: PackageKit Impact: A malicious app with root privileges may be able to modify the contents of system files Description: An issue in the handling of symlinks was addressed with improved validation.

CVE-2023-42952 [MEDIUM] CVE-2023-42952: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42952 Component: Automation Impact: An app with root privileges may be able to access private information Description: The issue was addressed with improved checks.

CVE-2023-2426 [MEDIUM] CVE-2023-2426: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-2426 Component: CVE-2023-2426

CVE-2022-22621 [MEDIUM] CVE-2022-22621: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22621 Component: UIKit Impact: A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions Description: This issue was addressed with improved checks.

CVE-2022-22677 [MEDIUM] CVE-2022-22677: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-22677 Component: WebRTC Impact: Video self-preview in a webRTC call may be interrupted if the user answers a phone call Description: A logic issue in the handling of concurrent media was addressed with improved state handling.

CVE-2023-40425 [MEDIUM] CVE-2023-40425: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40425 Component: Sandbox Impact: An app with root privileges may be able to access private information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2022-32781 [MEDIUM] CVE-2022-32781: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-32781 Component: FaceTime Impact: An app with root privileges may be able to access private information Description: This issue was addressed by enabling hardened runtime.