Apple macOS vulnerabilities

CVE-2023-40401 [HIGH] CWE-306 CVE-2023-40401: The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13. The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication.

CVE-2024-54508 [HIGH] CWE-125 CVE-2024-54508: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2023-42873 [HIGH] CWE-787 CVE-2023-42873: The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges.

CVE-2024-40786 [HIGH] CWE-284 CVE-2024-40786: This issue was addressed through improved state management. This issue is fixed in iOS 16.7.9 and iP This issue was addressed through improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8. An attacker may be able to view sensitive user information.

CVE-2024-54515 [HIGH] CWE-281 CVE-2024-54515: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to gain root privileges.

CVE-2025-24267 [HIGH] CWE-276 CVE-2025-24267: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.

CVE-2023-42871 [HIGH] CWE-787 CVE-2023-42871: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14, iOS 1 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.

CVE-2025-46291 [HIGH] CWE-693 CVE-2025-46291: A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An ap A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An app may bypass Gatekeeper checks.

CVE-2023-32378 [HIGH] CWE-416 CVE-2023-32378: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS V A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges.

CVE-2025-43402 [HIGH] CWE-787 CVE-2025-43402: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt process memory.

CVE-2025-43223 [HIGH] CWE-20 CVE-2025-43223: A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 1 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. A non-privileged user may be able to modify restricted network settings.

CVE-2025-43361 [HIGH] CWE-125 CVE-2025-43361: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory.

CVE-2025-43401 [HIGH] CWE-20 CVE-2025-43401: A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequo A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A remote attacker may be able to cause a denial-of-service.

CVE-2025-43474 [HIGH] CWE-125 CVE-2025-43474: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Seq An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or read kernel memory.

CVE-2025-43286 [HIGH] CWE-862 CVE-2025-43286: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to break out of its sandbox.

CVE-2025-24258 [HIGH] CWE-269 CVE-2025-24258: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to gain root privileges.

CVE-2025-43341 [HIGH] CWE-862 CVE-2025-43341: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.

CVE-2025-43268 [HIGH] CWE-732 CVE-2025-43268: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges.

CVE-2024-23203 [HIGH] CVE-2024-23203: The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iP The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5. A shortcut may be able to use sensitive data with certain actions without prompting the user.

CVE-2024-44305 [HIGH] CWE-863 CVE-2024-44305: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.6. This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.6. An app may be able to gain root privileges.