{
  "fix": "Monterey 12.7.6",
  "url": "https://patchblox.com/security/fix/macos/monterey-12.7.6",
  "summary": "Monterey 12.7.6, released July 29, 2024, fixes 37 CVEs in Monterey. One of them is being exploited (CVE-2024-23296); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.",
  "platform": "macos",
  "type": "os-version",
  "title": "Monterey 12.7.6",
  "released": "2024-07-29T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2024-23296, exploited (CISA KEV)",
  "supported": false,
  "cveCount": 37,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.99506,
  "maxCvss": 8.6,
  "vendorAdvisory": "https://support.apple.com/en-us/120910",
  "appliesTo": [
    {
      "product": "Monterey",
      "productUrl": "https://patchblox.com/security/product/macos/monterey",
      "fixedVersion": "12.7.6",
      "supported": false
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-23296",
      "url": "https://patchblox.com/security/cve/CVE-2024-23296",
      "title": "RTKit: An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.",
      "component": "RTKit",
      "impact": "An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.",
      "priority": "Patch now",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.01411,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-6387",
      "url": "https://patchblox.com/security/cve/CVE-2024-6387",
      "title": "RedHat Openssh: CVE-2024-6387  Remote Code Execution Due To A Race Condition In Signal Handling",
      "component": "OpenSSH",
      "impact": "A remote attacker may be able to cause arbitrary code execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.1,
      "epss": 0.99506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2398",
      "url": "https://patchblox.com/security/cve/CVE-2024-2398",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.6,
      "epss": 0.36081,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52356",
      "url": "https://patchblox.com/security/cve/CVE-2023-52356",
      "title": "ImageIO: Processing an image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing an image may lead to a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.02506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40803",
      "url": "https://patchblox.com/security/cve/CVE-2024-40803",
      "title": "Keychain Access: An attacker may be able to cause unexpected app termination",
      "component": "Keychain Access",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-23261",
      "url": "https://patchblox.com/security/cve/CVE-2024-23261",
      "title": "Time Zone: An attacker may be able to read information belonging to another user",
      "component": "Time Zone",
      "impact": "An attacker may be able to read information belonging to another user",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00911,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40799",
      "url": "https://patchblox.com/security/cve/CVE-2024-40799",
      "title": "CoreGraphics: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "CoreGraphics",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40800",
      "url": "https://patchblox.com/security/cve/CVE-2024-40800",
      "title": "Restore Framework: An app may be able to modify protected parts of the file system",
      "component": "Restore Framework",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40787",
      "url": "https://patchblox.com/security/cve/CVE-2024-40787",
      "title": "Shortcuts: A shortcut may be able to bypass Internet permission requirements",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass Internet permission requirements",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40809",
      "url": "https://patchblox.com/security/cve/CVE-2024-40809",
      "title": "Shortcuts: A shortcut may be able to bypass Internet permission requirements",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass Internet permission requirements",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40783",
      "url": "https://patchblox.com/security/cve/CVE-2024-40783",
      "title": "APFS: A malicious application may be able to bypass Privacy preferences",
      "component": "APFS",
      "impact": "A malicious application may be able to bypass Privacy preferences",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40828",
      "url": "https://patchblox.com/security/cve/CVE-2024-40828",
      "title": "StorageKit: A malicious app may be able to gain root privileges",
      "component": "Disk Management",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27826",
      "url": "https://patchblox.com/security/cve/CVE-2024-27826",
      "title": "Apple Neural Engine: An app may be able to execute arbitrary code with kernel privileges",
      "component": "Apple Neural Engine",
      "impact": "An app may be able to execute arbitrary code with kernel privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00258,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40781",
      "url": "https://patchblox.com/security/cve/CVE-2024-40781",
      "title": "PackageKit: A local attacker may be able to elevate their privileges",
      "component": "PackageKit",
      "impact": "A local attacker may be able to elevate their privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00237,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40821",
      "url": "https://patchblox.com/security/cve/CVE-2024-40821",
      "title": "Security: Third party app extensions may not receive the correct sandbox restrictions",
      "component": "Security",
      "impact": "Third party app extensions may not receive the correct sandbox restrictions",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2379",
      "url": "https://patchblox.com/security/cve/CVE-2024-2379",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.01863,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6277",
      "url": "https://patchblox.com/security/cve/CVE-2023-6277",
      "title": "ImageIO: Processing an image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing an image may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01825,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2004",
      "url": "https://patchblox.com/security/cve/CVE-2024-2004",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.5,
      "epss": 0.01681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2466",
      "url": "https://patchblox.com/security/cve/CVE-2024-2466",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01453,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40796",
      "url": "https://patchblox.com/security/cve/CVE-2024-40796",
      "title": "NetworkExtension: Private browsing may leak some browsing history",
      "component": "NetworkExtension",
      "impact": "Private browsing may leak some browsing history",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.009,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27881",
      "url": "https://patchblox.com/security/cve/CVE-2024-27881",
      "title": "Scripting Bridge: An app may be able to access information about a user\u2019s contacts",
      "component": "Scripting Bridge",
      "impact": "An app may be able to access information about a user\u2019s contacts",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00834,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40817",
      "url": "https://patchblox.com/security/cve/CVE-2024-40817",
      "title": "Safari: Visiting a website that frames malicious content may lead to UI spoofing",
      "component": "Safari",
      "impact": "Visiting a website that frames malicious content may lead to UI spoofing",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.1,
      "epss": 0.00693,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27877",
      "url": "https://patchblox.com/security/cve/CVE-2024-27877",
      "title": "AppleVA: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "AppleVA",
      "impact": "Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.1,
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40806",
      "url": "https://patchblox.com/security/cve/CVE-2024-40806",
      "title": "ImageIO: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00336,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40774",
      "url": "https://patchblox.com/security/cve/CVE-2024-40774",
      "title": "AppleMobileFileIntegrity: An app may be able to bypass Privacy preferences",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.9,
      "epss": 0.00331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40788",
      "url": "https://patchblox.com/security/cve/CVE-2024-40788",
      "title": "Kernel: A local attacker may be able to cause unexpected system shutdown",
      "component": "Kernel",
      "impact": "A local attacker may be able to cause unexpected system shutdown",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40798",
      "url": "https://patchblox.com/security/cve/CVE-2024-40798",
      "title": "Security: An app may be able to read Safari\u0027s browsing history",
      "component": "Security",
      "impact": "An app may be able to read Safari\u0027s browsing history",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40793",
      "url": "https://patchblox.com/security/cve/CVE-2024-40793",
      "title": "Shortcuts: An app may be able to access user-sensitive data",
      "component": "Shortcuts",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27882",
      "url": "https://patchblox.com/security/cve/CVE-2024-27882",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.4,
      "epss": 0.003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40833",
      "url": "https://patchblox.com/security/cve/CVE-2024-40833",
      "title": "Shortcuts: A shortcut may be able to use sensitive data with certain actions without prompting the user",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to use sensitive data with certain actions without prompting the user",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00296,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27873",
      "url": "https://patchblox.com/security/cve/CVE-2024-27873",
      "title": "CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0029,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40823",
      "url": "https://patchblox.com/security/cve/CVE-2024-40823",
      "title": "PackageKit: An app may be able to access user-sensitive data",
      "component": "PackageKit",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40775",
      "url": "https://patchblox.com/security/cve/CVE-2024-40775",
      "title": "AppleMobileFileIntegrity: An app may be able to leak sensitive user information",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40827",
      "url": "https://patchblox.com/security/cve/CVE-2024-40827",
      "title": "DesktopServices: An app may be able to overwrite arbitrary files",
      "component": "DesktopServices",
      "impact": "An app may be able to overwrite arbitrary files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40834",
      "url": "https://patchblox.com/security/cve/CVE-2024-40834",
      "title": "Shortcuts: A shortcut may be able to bypass sensitive Shortcuts app settings",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass sensitive Shortcuts app settings",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.4,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40816",
      "url": "https://patchblox.com/security/cve/CVE-2024-40816",
      "title": "Kernel: A local attacker may be able to cause unexpected system shutdown",
      "component": "Kernel",
      "impact": "A local attacker may be able to cause unexpected system shutdown",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44205",
      "url": "https://patchblox.com/security/cve/CVE-2024-44205",
      "title": "Siri: A sandboxed app may be able to access sensitive user data in system logs",
      "component": "Siri",
      "impact": "A sandboxed app may be able to access sensitive user data in system logs",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}