Apple Macos Monterey vulnerabilities

751 known vulnerabilities affecting apple/macos_monterey.

Total CVEs
751
CISA KEV
20
actively exploited
Public exploits
4
Exploited in wild
18
Severity breakdown
CRITICAL39HIGH364MEDIUM310LOW31UNKNOWN7

Vulnerabilities

Page 7 of 38
CVE-2023-42936MEDIUMCVSS 5.5v12.7.22023-12-11
CVE-2023-42936 [MEDIUM] CVE-2023-42936: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42936 Component: Sandbox Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved redaction of sensitive information.
apple
CVE-2023-42932MEDIUMCVSS 5.5v12.7.22023-12-11
CVE-2023-42932 [MEDIUM] CVE-2023-42932: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42932 Component: TCC Impact: An app may be able to access protected user data Description: A logic issue was addressed with improved checks.
apple
CVE-2020-19189MEDIUMCVSS 6.5v12.7.22023-12-11
CVE-2020-19189 [MEDIUM] CVE-2020-19189: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2020-19189 Component: CVE-2020-19189
apple
CVE-2020-19188MEDIUMCVSS 6.5v12.7.22023-12-11
CVE-2020-19188 [MEDIUM] CVE-2020-19188: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2020-19188 Component: CVE-2020-19188
apple
CVE-2023-42891MEDIUMCVSS 5.5v12.7.22023-12-11
CVE-2023-42891 [MEDIUM] CVE-2023-42891: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2023-42891 Component: IOKit Impact: An app may be able to monitor keystrokes without user permission Description: An authentication issue was addressed with improved state management.
apple
CVE-2020-19185MEDIUMCVSS 6.5v12.7.22023-12-11
CVE-2020-19185 [MEDIUM] CVE-2020-19185: macOS Monterey 12.7.2 Apple Security Update: About the security content of macOS Monterey 12.7.2 Product: macOS Monterey Version: 12.7.2 CVE: CVE-2020-19185 Component: CVE-2020-19185
apple
CVE-2023-40446HIGHCVSS 7.8v12.7.12023-10-25
CVE-2023-40446 [HIGH] CVE-2023-40446: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40446 Component: Foundation Impact: A website may be able to access sensitive user data when resolving symlinks Description: This issue was addressed with improved handling of symlinks.
apple
CVE-2023-42844HIGHCVSS 7.5v12.7.12023-10-25
CVE-2023-42844 [HIGH] CVE-2023-42844: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42844 Component: Foundation Impact: A website may be able to access sensitive user data when resolving symlinks Description: This issue was addressed with improved handling of symlinks.
apple
CVE-2023-42873HIGHCVSS 7.8v12.7.12023-10-25
CVE-2023-42873 [HIGH] CVE-2023-42873: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42873 Component: Pro Res Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved bounds checks.
apple
CVE-2023-40423HIGHCVSS 7.8v12.7.12023-10-25
CVE-2023-40423 [HIGH] CVE-2023-40423: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40423 Component: IOTextEncryptionFamily Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.
apple
CVE-2023-42856HIGHCVSS 7.8v12.7.12023-10-25
CVE-2023-42856 [HIGH] CVE-2023-42856: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42856 Component: Model I/O Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved memory handling.
apple
CVE-2023-40416MEDIUMCVSS 6.5v12.7.12023-10-25
CVE-2023-40416 [MEDIUM] CVE-2023-40416: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40416 Component: ImageIO Impact: Processing an image may result in disclosure of process memory Description: The issue was addressed with improved memory handling.
apple
CVE-2023-42849MEDIUMCVSS 6.5v12.7.12023-10-25
CVE-2023-42849 [MEDIUM] CVE-2023-42849: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42849 Component: Kernel Impact: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations Description: The issue was addressed with improved memory handling.
apple
CVE-2023-40421MEDIUMCVSS 5.5v12.7.12023-10-25
CVE-2023-40421 [MEDIUM] CVE-2023-40421: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40421 Component: CVE-2023-36191 Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2023-42889MEDIUMCVSS 5.5v12.7.12023-10-25
CVE-2023-42889 [MEDIUM] CVE-2023-42889: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42889 Component: PackageKit Impact: An app may be able to bypass certain Privacy preferences Description: The issue was addressed with improved checks.
apple
CVE-2023-40413MEDIUMCVSS 5.5v12.7.12023-10-25
CVE-2023-40413 [MEDIUM] CVE-2023-40413: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40413 Component: Find My Impact: An app may be able to read sensitive location information Description: The issue was addressed with improved handling of caches.
apple
CVE-2023-42877MEDIUMCVSS 5.5v12.7.12023-10-25
CVE-2023-42877 [MEDIUM] CVE-2023-42877: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42877 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks.
apple
CVE-2023-40449MEDIUMCVSS 5.5v12.7.12023-10-25
CVE-2023-40449 [MEDIUM] CVE-2023-40449: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40449 Component: CoreAnimation Impact: An app may be able to cause a denial-of-service Description: The issue was addressed with improved memory handling.
apple
CVE-2023-40425MEDIUMCVSS 4.4v12.7.12023-10-25
CVE-2023-40425 [MEDIUM] CVE-2023-40425: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-40425 Component: Sandbox Impact: An app with root privileges may be able to access private information Description: A privacy issue was addressed with improved private data redaction for log entries.
apple
CVE-2023-42858MEDIUMCVSS 5.5v12.7.12023-10-25
CVE-2023-42858 [MEDIUM] CVE-2023-42858: macOS Monterey 12.7.1 Apple Security Update: About the security content of macOS Monterey 12.7.1 Product: macOS Monterey Version: 12.7.1 CVE: CVE-2023-42858 Component: WindowServer Impact: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks.
apple