Apple Macos Monterey vulnerabilities

CVE-2023-40442 [LOW] CVE-2023-40442: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-40442 Component: Accessibility Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42969 [LOW] CVE-2023-42969: macOS Monterey 12.7 Apple Security Update: About the security content of macOS Monterey 12.7 Product: macOS Monterey Version: 12.7 CVE: CVE-2023-42969 Impact: An app may be able to break out of its sandbox Description: The issue was addressed with improved handling of caches.

CVE-2021-31000 [LOW] CVE-2021-31000: macOS Monterey 12.1 Apple Security Update: About the security content of macOS Monterey 12.1 Product: macOS Monterey Version: 12.1 CVE: CVE-2021-31000 Component: Game Center Impact: A malicious application may be able to read sensitive contact information Description: A permissions issue was addressed with improved validation.

CVE-2021-30994 [LOW] CVE-2021-30994: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30994 Component: App Store Impact: A malicious application may be able to access local users' Apple IDs Description: An access issue was addressed with improved access restrictions.

CVE-2024-23245 [LOW] CVE-2024-23245: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23245 Component: Shortcuts Impact: Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent Description: This issue was addressed by adding an additional prompt for user consent.

CVE-2023-28197 [LOW] CVE-2023-28197: macOS Monterey 12.6.4 Apple Security Update: About the security content of macOS Monterey 12.6.4 Product: macOS Monterey Version: 12.6.4 CVE: CVE-2023-28197 Component: Messages Impact: An app may be able to access user-sensitive data Description: An access issue was addressed with additional sandbox restrictions.

CVE-2021-30908 [LOW] CVE-2021-30908: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30908 Component: Windows Server Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen Description: An authentication issue was addressed with improved state management.

CVE-2024-23227 [LOW] CVE-2024-23227: macOS Monterey 12.7.4 Apple Security Update: About the security content of macOS Monterey 12.7.4 Product: macOS Monterey Version: 12.7.4 CVE: CVE-2024-23227 Component: Airport Impact: An app may be able to read sensitive location information Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-32386 [LOW] CVE-2023-32386: macOS Monterey 12.6.6 Apple Security Update: About the security content of macOS Monterey 12.6.6 Product: macOS Monterey Version: 12.6.6 CVE: CVE-2023-32386 Component: Contacts Impact: An app may be able to observe unprotected user data Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2022-42834 [LOW] CVE-2022-42834: macOS Monterey 12.6.3 Apple Security Update: About the security content of macOS Monterey 12.6.3 Product: macOS Monterey Version: 12.6.3 CVE: CVE-2022-42834 Component: Mail Impact: An app may be able to access mail folder attachments through a temporary directory used during compression Description: An access issue was addressed with improved access restrictions.

CVE-2023-23493 [LOW] CVE-2023-23493: macOS Monterey 12.6.3 Apple Security Update: About the security content of macOS Monterey 12.6.3 Product: macOS Monterey Version: 12.6.3 CVE: CVE-2023-23493 Component: DiskArbitration Impact: An encrypted volume may be unmounted and remounted by a different user without prompting for the password Description: A logic issue was addressed with improved state management.

CVE-2023-40392 [LOW] CVE-2023-40392: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-40392 Component: CFNetwork Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-38605 [LOW] CVE-2023-38605: macOS Monterey 12.6.8 Apple Security Update: About the security content of macOS Monterey 12.6.8 Product: macOS Monterey Version: 12.6.8 CVE: CVE-2023-38605 Component: Weather Impact: An app may be able to determine a user’s current location Description: This issue was addressed with improved redaction of sensitive information.

CVE-2021-30915 [LOW] CVE-2021-30915: macOS Monterey 12.0.1 Apple Security Update: About the security content of macOS Monterey 12.0.1 Product: macOS Monterey Version: 12.0.1 CVE: CVE-2021-30915 Component: UIKit Impact: A person with physical access to a device may be determine characteristics of a user's password in a secure text entry field Description: A logic issue was addressed with improved state management.

CVE-2022-22599 [LOW] CVE-2022-22599: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-22599 Component: Siri Impact: A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen Description: A permissions issue was addressed with improved validation.

CVE-2021-30918 [LOW] CVE-2021-30918: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2021-30918 Component: VoiceOver Impact: A user may be able to view restricted content from the lock screen Description: A lock screen issue was addressed with improved state management.

CVE-2021-4136 [HIGH] CVE-2021-4136: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2021-4136 Component: CVE-2021-4136

CVE-2022-0128 [HIGH] CVE-2022-0128: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2022-0128 Component: CVE-2022-0128

CVE-2021-4192 [HIGH] CVE-2021-4192: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2021-4192 Component: CVE-2021-4192

CVE-2021-4187 [HIGH] CVE-2021-4187: macOS Monterey 12.3 Apple Security Update: About the security content of macOS Monterey 12.3 Product: macOS Monterey Version: 12.3 CVE: CVE-2021-4187 Component: CVE-2021-4187