Joshua Mason

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 **Description** The issue allows an app to potentially gain root privileges due to inadequate checks. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation are not provided, such as specific API endpoints, vulnerable parameters or variables, or function names. **Recommendations** For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Big Sur versions prior to 11.6.8 watchOS versions prior to 8.7 tvOS versions prior to 15.6 macOS Monterey versions prior to 12.5 macOS Catalina versions prior to Security Update 2022-005 **Description** A logic issue was addressed with improved state management, which may allow an app to gain root privileges. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 or later. For iPadOS versions prior to 15.6, update to iPadOS 15.6 or later. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8 or later. For watchOS versions prior to 8.7, update to watchOS 8.7 or later. For tvOS versions prior to 15.6, update to tvOS 15.6 or later. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 or later. For macOS Catalina versions prior to Security Update 2022-005, apply Security Update 2022-005 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 macOS Catalina versions prior to Security Update 2022-005 iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 watchOS versions prior to 8.7 **Description** The issue was addressed with improved bounds checks. A remote user may cause an unexpected app termination or arbitrary code execution. **Recommendations** For macOS versions prior to 12.5, update to macOS Monterey 12.5. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8. For macOS Catalina versions prior to Security Update 2022-005, apply Security Update 2022-005. For iOS versions prior to 15.6, update to iOS 15.6. For iPadOS versions prior to 15.6, update to iPadOS 15.6. For tvOS versions prior to 15.6, update to tvOS 15.6. For watchOS versions prior to 8.7, update to watchOS 8.7.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.4 **Description** A validation issue existed in the handling of symlinks, which has been addressed with improved validation of symlinks. This issue may allow an app to gain elevated privileges. **Recommendations** For versions prior to 12.4, update to macOS Monterey 12.4 to resolve the issue. As a temporary workaround, consider restricting the use of symlinks to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** CUPS versions prior to the fixed version macOS versions prior to macOS Monterey 12.3 macOS Big Sur versions prior to 11.6.5 macOS Catalina versions prior to Security Update 2022-003 **Description** The issue is related to a logic problem that has been addressed with improved state management, allowing an application to potentially gain elevated privileges. This could be exploited to bypass authentication and execute code, thereby allowing an attacker to elevate their privileges. **Recommendations** For CUPS, update to a version that includes the fix for this issue. For macOS Monterey, update to version 12.3 or later. For macOS Big Sur, update to version 11.6.5 or later. For macOS Catalina, apply Security Update 2022-003 or later.