Apple Macos Monterey vulnerabilities

CVE-2022-32857 [MEDIUM] CVE-2022-32857: macOS Monterey 12.5 Apple Security Update: About the security content of macOS Monterey 12.5 Product: macOS Monterey Version: 12.5 CVE: CVE-2022-32857 Component: Software Update Impact: A user in a privileged network position can track a user’s activity Description: This issue was addressed by using HTTPS when sending information over the network.

CVE-2022-22647 [MEDIUM] CVE-2022-22647: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22647 Component: Login Window Impact: A person with access to a Mac may be able to bypass Login Window Description: This issue was addressed with improved checks.

CVE-2023-28322 [LOW] CVE-2023-28322: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-28322 Component: CVE-2023-28322

CVE-2024-27882 [MEDIUM] CVE-2024-27882: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-27882 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.

CVE-2024-27883 [MEDIUM] CVE-2024-27883: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-27883 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.

CVE-2024-40834 [MEDIUM] CVE-2024-40834: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40834 Component: Shortcuts Impact: A shortcut may be able to bypass sensitive Shortcuts app settings Description: This issue was addressed by adding an additional prompt for user consent.

CVE-2022-32782 [MEDIUM] CVE-2022-32782: macOS Monterey 12.4 Apple Security Update: About the security content of macOS Monterey 12.4 Product: macOS Monterey Version: 12.4 CVE: CVE-2022-32782 Component: Photo Booth Impact: An app with root privileges may be able to access private information Description: This issue was addressed by enabling hardened runtime.

CVE-2024-2004 [LOW] CVE-2024-2004: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-2004 Component: CVE-2024-2004

CVE-2023-2609 [MEDIUM] CVE-2023-2609: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-2609 Component: CVE-2023-2609

CVE-2022-35252 [LOW] CVE-2022-35252: macOS Monterey 12.6.3 Apple Security Update: About the security content of macOS Monterey 12.6.3 Product: macOS Monterey Version: 12.6.3 CVE: CVE-2022-35252 Component: CVE-2022-35252 Impact: Mounting a maliciously crafted Samba network share may lead to arbitrary code execution Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2024-23257 [LOW] CVE-2024-23257: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23257 Component: ImageIO Impact: Processing an image may result in disclosure of process memory Description: The issue was addressed with improved memory handling.

CVE-2022-48575 [LOW] CWE-287 CVE-2022-48575: A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4.

CVE-2023-40395 [LOW] CVE-2023-40395: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-40395 Component: Game Center Impact: An app may be able to access contacts Description: The issue was addressed with improved handling of caches.

CVE-2024-40798 [LOW] CVE-2024-40798: macOS Monterey 12.7.6 Apple Security Update: About the security content of macOS Monterey 12.7.6 Product: macOS Monterey Version: 12.7.6 CVE: CVE-2024-40798 Component: Security Impact: An app may be able to read Safari's browsing history Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-40427 [LOW] CVE-2023-40427: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-40427 Component: Maps Impact: An app may be able to read sensitive location information Description: The issue was addressed with improved handling of caches.

CVE-2022-32913 [LOW] CVE-2022-32913: macOS Monterey 12.6 Apple Security Update: About the security content of macOS Monterey 12.6 Product: macOS Monterey Version: 12.6 CVE: CVE-2022-32913 Component: Image Processing Impact: A sandboxed app may be able to determine which app is currently using the camera Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2022-22656 [LOW] CVE-2022-22656: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22656 Component: CVE-2022-22656

CVE-2024-27799 [LOW] CVE-2024-27799: macOS Monterey 12.7.5 Apple Security Update: About the security content of macOS Monterey 12.7.5 Product: macOS Monterey Version: 12.7.5 CVE: CVE-2024-27799 Component: IOHIDFamily Impact: An unprivileged app may be able to log keystrokes in other apps including those using secure input mode Description: This issue was addressed with additional entitlement checks.

CVE-2023-23505 [LOW] CVE-2023-23505: macOS Monterey 12.6.3 Apple Security Update: About the security content of macOS Monterey 12.6.3 Product: macOS Monterey Version: 12.6.3 CVE: CVE-2023-23505 Component: Screen Time Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-38612 [LOW] CVE-2023-38612: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-38612 Component: Ask to Buy Impact: An app may be able to access protected user data Description: The issue was addressed with improved checks.