macOS · macOS update · July 29, 2024
Monterey 12.7.6
Monterey 12.7.6, released July 29, 2024, fixes 37 CVEs in Monterey. One of them is being exploited (CVE-2024-23296); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
37
1 rated Critical
Exploited
1
CVE-2024-23296
Highest CVSS
8.6
Base score, 0 to 10
Highest EPSS
0.9951
99th percentile
Priority of the 37 CVEs
Patch now 1
Urgent 1
High 13
Routine 22
Applies to
| Product | Version |
|---|---|
| Monterey | 12.7.6 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-23296 | RTKit: An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. | An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. | 7.8 | 0.0141 | KEVExploited |
| Urgent | CVE-2024-6387 | RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling | A remote attacker may be able to cause arbitrary code execution | 8.1 | 0.9951 | None reported |
| High | CVE-2024-2398 | curl: Multiple issues in curl | Multiple issues in curl | 8.6 | 0.3608 | None reported |
| High | CVE-2023-52356 | ImageIO: Processing an image may lead to a denial-of-service | Processing an image may lead to a denial-of-service | 7.5 | 0.0251 | None reported |
| High | CVE-2024-40803 | Keychain Access: An attacker may be able to cause unexpected app termination | An attacker may be able to cause unexpected app termination | 7.5 | 0.0122 | None reported |
| High | CVE-2024-23261 | Time Zone: An attacker may be able to read information belonging to another user | An attacker may be able to read information belonging to another user | 7.5 | 0.0091 | None reported |
| High | CVE-2024-40799 | CoreGraphics: Processing a maliciously crafted file may lead to unexpected app termination | Processing a maliciously crafted file may lead to unexpected app termination | 7.1 | 0.0043 | None reported |
| High | CVE-2024-40800 | Restore Framework: An app may be able to modify protected parts of the file system | An app may be able to modify protected parts of the file system | 8.4 | 0.0034 | None reported |
| High | CVE-2024-40787 | Shortcuts: A shortcut may be able to bypass Internet permission requirements | A shortcut may be able to bypass Internet permission requirements | 7.1 | 0.0033 | None reported |
| High | CVE-2024-40809 | Shortcuts: A shortcut may be able to bypass Internet permission requirements | A shortcut may be able to bypass Internet permission requirements | 7.8 | 0.0033 | None reported |
| High | CVE-2024-40783 | APFS: A malicious application may be able to bypass Privacy preferences | A malicious application may be able to bypass Privacy preferences | 7.1 | 0.0031 | None reported |
| High | CVE-2024-40828 | StorageKit: A malicious app may be able to gain root privileges | A malicious app may be able to gain root privileges | 8.4 | 0.0026 | None reported |
| High | CVE-2024-27826 | Apple Neural Engine: An app may be able to execute arbitrary code with kernel privileges | An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0026 | None reported |
| High | CVE-2024-40781 | PackageKit: A local attacker may be able to elevate their privileges | A local attacker may be able to elevate their privileges | 8.4 | 0.0024 | None reported |
| High | CVE-2024-40821 | Security: Third party app extensions may not receive the correct sandbox restrictions | Third party app extensions may not receive the correct sandbox restrictions | 8.4 | 0.0023 | None reported |
| Routine | CVE-2024-2379 | curl: Multiple issues in curl | Multiple issues in curl | 6.3 | 0.0186 | None reported |
| Routine | CVE-2023-6277 | ImageIO: Processing an image may lead to a denial-of-service | Processing an image may lead to a denial-of-service | 6.5 | 0.0183 | None reported |
| Routine | CVE-2024-2004 | curl: Multiple issues in curl | Multiple issues in curl | 3.5 | 0.0168 | None reported |
| Routine | CVE-2024-2466 | curl: Multiple issues in curl | Multiple issues in curl | 6.5 | 0.0145 | None reported |
| Routine | CVE-2024-40796 | NetworkExtension: Private browsing may leak some browsing history | Private browsing may leak some browsing history | 5.3 | 0.0090 | None reported |
| Routine | CVE-2024-27881 | Scripting Bridge: An app may be able to access information about a user’s contacts | An app may be able to access information about a user’s contacts | 5.3 | 0.0083 | None reported |
| Routine | CVE-2024-40817 | Safari: Visiting a website that frames malicious content may lead to UI spoofing | Visiting a website that frames malicious content may lead to UI spoofing | 6.1 | 0.0069 | None reported |
| Routine | CVE-2024-27877 | AppleVA: Processing a maliciously crafted file may lead to unexpected app termination | Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents | 6.1 | 0.0043 | None reported |
| Routine | CVE-2024-40806 | ImageIO: Processing a maliciously crafted file may lead to unexpected app termination | Processing a maliciously crafted file may lead to unexpected app termination | 5.5 | 0.0034 | None reported |
| Routine | CVE-2024-40774 | AppleMobileFileIntegrity: An app may be able to bypass Privacy preferences | An app may be able to bypass Privacy preferences | 5.9 | 0.0033 | None reported |
Showing 1 to 25 of 37
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.