macOS · macOS update · March 7, 2024
Monterey 12.7.4
Monterey 12.7.4, released March 7, 2024, fixes 27 CVEs in Monterey. One of them is being exploited (CVE-2024-23225); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
27
2 rated Critical
Exploited
1
CVE-2024-23225
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0179
78th percentile
Priority of the 27 CVEs
Patch now 1
Urgent 2
High 7
Routine 17
Applies to
| Product | Version |
|---|---|
| Monterey | 12.7.4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-23225 | Kernel: An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. | An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. | 7.8 | 0.0148 | KEVExploited |
| Urgent | CVE-2024-23286 | ImageIO: Processing an image may lead to arbitrary code execution | Processing an image may lead to arbitrary code execution | 9.8 | 0.0124 | None reported |
| Urgent | CVE-2024-23265 | Kernel: An app may be able to cause unexpected system termination or write kernel memory | An app may be able to cause unexpected system termination or write kernel memory | 9.8 | 0.0072 | None reported |
| High | CVE-2024-23204 | Shortcuts: A shortcut may be able to use sensitive data with certain actions without prompting the user | A shortcut may be able to use sensitive data with certain actions without prompting the user | 7.5 | 0.0179 | None reported |
| High | CVE-2024-23274 | PackageKit: An app may be able to elevate privileges | An app may be able to elevate privileges | 8.4 | 0.0042 | None reported |
| High | CVE-2024-23247 | ColorSync: Processing a file may lead to unexpected app termination or arbitrary code execution | Processing a file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0038 | None reported |
| High | CVE-2024-23276 | Admin Framework: An app may be able to elevate privileges | An app may be able to elevate privileges | 8.4 | 0.0028 | None reported |
| High | CVE-2024-23270 | Image Processing: An app may be able to execute arbitrary code with kernel privileges | An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0028 | None reported |
| High | CVE-2024-23234 | Intel Graphics Driver: An app may be able to execute arbitrary code with kernel privileges | An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0026 | None reported |
| High | CVE-2024-23299 | Disk Images: An app may be able to break out of its sandbox | An app may be able to break out of its sandbox | 8.6 | 0.0024 | None reported |
| Routine | CVE-2024-23218 | CoreCrypto: An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key | An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key | 5.9 | 0.0099 | None reported |
| Routine | CVE-2024-23264 | Metal: An application may be able to read restricted memory | An application may be able to read restricted memory | 5.3 | 0.0080 | None reported |
| Routine | CVE-2024-23257 | ImageIO: Processing an image may result in disclosure of process memory | Processing an image may result in disclosure of process memory | 3.3 | 0.0045 | None reported |
| Routine | CVE-2024-23245 | Shortcuts: Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent | Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent | 5.4 | 0.0043 | None reported |
| Routine | CVE-2024-23216 | PackageKit: An app may be able to overwrite arbitrary files | An app may be able to overwrite arbitrary files | 6.7 | 0.0027 | None reported |
| Routine | CVE-2024-23283 | Notes: An app may be able to access user-sensitive data | An app may be able to access user-sensitive data | 6.2 | 0.0026 | None reported |
| Routine | CVE-2023-28826 | MediaRemote: An app may be able to access sensitive user data | An app may be able to access sensitive user data | 5.5 | 0.0026 | None reported |
| Routine | CVE-2024-23201 | libxpc: An app may be able to cause a denial-of-service | An app may be able to cause a denial-of-service | 6.2 | 0.0025 | None reported |
| Routine | CVE-2024-23227 | Airport: An app may be able to read sensitive location information | An app may be able to read sensitive location information | 6.2 | 0.0025 | None reported |
| Routine | CVE-2024-23269 | AppleMobileFileIntegrity: An app may be able to modify protected parts of the file system | An app may be able to modify protected parts of the file system | 6.2 | 0.0025 | None reported |
| Routine | CVE-2024-23272 | Storage Services: A user may gain access to protected parts of the file system | A user may gain access to protected parts of the file system | 5.5 | 0.0024 | None reported |
| Routine | CVE-2024-23244 | Dock: An app from a standard user account may be able to escalate privilege after admin user login | An app from a standard user account may be able to escalate privilege after admin user login | 6.7 | 0.0023 | None reported |
| Routine | CVE-2024-23266 | Kerberos v5 PAM module: An app may be able to modify protected parts of the file system | An app may be able to modify protected parts of the file system | 5.5 | 0.0023 | None reported |
| Routine | CVE-2024-23267 | PackageKit: An app may be able to bypass certain Privacy preferences | An app may be able to bypass certain Privacy preferences | 5.5 | 0.0023 | None reported |
| Routine | CVE-2023-40389 | Transparency: An app may be able to access sensitive user data | An app may be able to access sensitive user data | 5.5 | 0.0022 | None reported |
Showing 1 to 25 of 27
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.