![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2019\/03\/ios-software-update-available-icon-600x300-e1558142227486.png\"){kind=icon}
<\/p>\n<\/p>\n
On Monday, Apple released security updates for macOS Big Sur and macOS Catalina. But strangely, Apple did not provide a single detail about which security issues were addressed in the updates.<\/p>\n
Here’s what little we know about the latest macOS updates.<\/p>\n
On Apple’s “What’s new in the updates for macOS Big Sur<\/a>” page, Apple simply states of macOS Big Sur 11.6.4<\/strong>:<\/p>\n This update is recommended for all users and improves the security of macOS.<\/p><\/blockquote>\n (Apple no longer updates its “What’s new in the updates for macOS Catalina<\/a>” page, so there is no specific statement there about the corresponding update, Security Update 2022-002 Catalina<\/strong>.)<\/p>\n Usually, Apple provides details about security fixes at its “Apple security updates<\/a>” page.<\/p>\n This time around, however, Apple is \u2014 at least so far \u2014 staying silent about what the latest updates include.<\/p>\n Apple offers no CVE details for macOS Big Sur 11.6.4 or Security Update 2022-002 Catalina.<\/p><\/div>\n Instead, Apple simply states that “This update has no published CVE entries” for both updates. Vulnerabilities often have CVE numbers assigned to them to help researchers identify whether the same security issue affects multiple products.<\/p>\n It is extremely rare for Apple to issue a security update without referencing any CVE numbers. In fact, this is the first case we could find where Apple published a security-only update for macOS that did not include a single CVE reference<\/strong> in its security release notes.<\/p>\n We have reached out to Apple for comment. If Apple responds, we’ll update this article to include the company’s statement.<\/p>\n One thing we can assume that the two updates do\u00a0not<\/em> include is a fix for the WebKit vulnerability that was already included in last week’s Safari 15.3 update<\/a> for both Big Sur and Catalina. Apple specifically named that vulnerability as CVE-2022-22620.<\/p>\n![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/02\/macOS-Big-Sur-11.6.4-and-Security-Update-2022-002-Catalina-no-details.png\")
What do the new Big Sur and Catalina updates likely NOT include?<\/h3>\n