Chenyuwang

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 15.5 Apple macOS versions prior to 12.4 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 **Description** A race condition was addressed with improved locking, which may allow an application to execute arbitrary code with kernel privileges. **Recommendations** For Apple tvOS versions prior to 15.5, update to tvOS 15.5 to resolve the issue. For Apple macOS versions prior to 12.4, update to macOS Monterey 12.4 to resolve the issue. For Apple iOS versions prior to 15.5, update to iOS 15.5 to resolve the issue. For Apple iPadOS versions prior to 15.5, update to iPadOS 15.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 Security Update versions prior to 2021-007 Catalina **Description** A malicious application may gain access to a user's Keychain items due to an issue that was addressed with improved permissions logic. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1. For Security Update versions prior to 2021-007 Catalina, apply Security Update 2021-007 Catalina.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 **Description** The issue arises from a logic problem that has been addressed with improved restrictions, allowing an unprivileged application to potentially edit NVRAM variables. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.1 macOS Big Sur versions prior to 11.6.2 Security Update versions prior to 2021-008 Catalina **Description** A logic issue was addressed with improved state management. This issue allows a malicious application to bypass Gatekeeper checks. **Recommendations** For macOS versions prior to 12.1, update to macOS Monterey 12.1 to resolve the issue. For macOS Big Sur versions prior to 11.6.2, update to macOS Big Sur 11.6.2 to resolve the issue. For Security Update versions prior to 2021-008 Catalina, apply Security Update 2021-008 Catalina to resolve the issue.