On October 26th – Apple recently pushed out the official release and latest security patches for macOS 13 Ventura. macOS 12 Monterey and macOS 11 Big Sur have also received security patch updates.
Three vulnerabilities were found in older versions of macOS, and Apple pushed out security patches for those who were unable or unwilling to update to macOS 13 Ventura. The macOS Monterey 12.6.1 and macOS Big Sur 11.7.1 updates address AppleMobileFileIntegrity, Ruby and Sandbox sandboxing issues
The notes on Apple’s Security Updates page describe the patched vulnerabilities as follows.
AppleMobileFileIntegrity affects applications that could modify protected parts of the file system, which has been resolved by removing additional permissions. cve-2022-42825
Ruby affects remote users which could lead to unexpected application termination or arbitrary code execution. The memory corruption issue has been resolved by updating Ruby version 2.6.10. cve-2022-28739
Sandbox affects applications with root privileges that may be able to access private information; this issue has been resolved with improved data protection. cve-2022-32862
A calendar fix has also been made in the macOS Monterey security notes. An anonymous researcher helped resolve an unknown bug that was not addressed in the main fix.
Any Mac user who has a Mac that cannot be updated to macOS 13 Ventura and is able to run macOS Big Sur or macOS Monterey will get these updates. They will be installed automatically, or users can update manually via System Preferences
