Apple Macos Sequoia vulnerabilities

CVE-2024-54526 [MEDIUM] CVE-2024-54526: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54526 Component: AppleMobileFileIntegrity Impact: A malicious app may be able to access private information Description: The issue was addressed with improved checks.

CVE-2025-24222 [MEDIUM] CVE-2025-24222: macOS Sequoia 15.5 Apple Security Update: About the security content of macOS Sequoia 15.5 Product: macOS Sequoia Version: 15.5 CVE: CVE-2025-24222 Component: BOM Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: The issue was addressed with improved memory handling.

CVE-2024-40857 [MEDIUM] CVE-2024-40857: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-40857 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: This issue was addressed through improved state management.

CVE-2024-27876 [MEDIUM] CVE-2024-27876: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-27876 Component: Compression Impact: Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files Description: A race condition was addressed with improved locking.

CVE-2025-43239 [HIGH] CVE-2025-43239: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43239 Component: Single Sign-On Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks.

CVE-2025-43254 [HIGH] CVE-2025-43254: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43254 Component: Dock Impact: An app may be able to access protected user data Description: This issue was addressed by removing the vulnerable code.

CVE-2026-20680 [MEDIUM] CVE-2026-20680: macOS Sequoia 15.7.4 Apple Security Update: About the security content of macOS Sequoia 15.7.4 Product: macOS Sequoia Version: 15.7.4 CVE: CVE-2026-20680 Component: Spotlight Impact: A sandboxed app may be able to access sensitive user data Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2025-43448 [MEDIUM] CVE-2025-43448: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43448 Component: CloudKit Impact: An app may be able to break out of its sandbox Description: This issue was addressed with improved validation of symlinks.

CVE-2025-43412 [MEDIUM] CVE-2025-43412: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43412 Component: TCC Impact: An app may be able to break out of its sandbox Description: A file quarantine bypass was addressed with additional checks.

CVE-2024-40826 [MEDIUM] CVE-2024-40826: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-40826 Component: Printing Impact: An unencrypted document may be written to a temporary file when using print preview Description: A privacy issue was addressed with improved handling of files.

CVE-2025-40909 [MEDIUM] CVE-2025-40909: macOS Sequoia 15.7 Apple Security Update: About the security content of macOS Sequoia 15.7 Product: macOS Sequoia Version: 15.7 CVE: CVE-2025-40909 Component: CVE-2025-40909

CVE-2024-44167 [MEDIUM] CVE-2024-44167: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-44167 Component: Notes Impact: An app may be able to overwrite arbitrary files Description: This issue was addressed by removing the vulnerable code.

CVE-2025-31241 [MEDIUM] CVE-2025-31241: macOS Sequoia 15.5 Apple Security Update: About the security content of macOS Sequoia 15.5 Product: macOS Sequoia Version: 15.5 CVE: CVE-2025-31241 Component: Kernel Impact: A remote attacker may cause an unexpected app termination Description: A double free issue was addressed with improved memory management.

CVE-2024-54488 [MEDIUM] CVE-2024-54488: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54488 Component: Accounts Impact: Photos in the Hidden Photos Album may be viewed without authentication Description: A logic issue was addressed with improved file handling.

CVE-2024-44245 [HIGH] CVE-2024-44245: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-44245 Component: Kernel Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling.

CVE-2025-43240 [MEDIUM] CVE-2025-43240: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43240 Component: WebKit Impact: A download's origin may be incorrectly associated Description: A logic issue was addressed with improved checks.

CVE-2025-24212 [MEDIUM] CVE-2025-24212: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24212 Component: Calendar Impact: An app may be able to break out of its sandbox Description: This issue was addressed with improved checks.

CVE-2025-30429 [MEDIUM] CVE-2025-30429: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-30429 Component: Calendar Impact: An app may be able to break out of its sandbox Description: A path handling issue was addressed with improved validation.

CVE-2024-40797 [MEDIUM] CVE-2024-40797: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-40797 Component: Safari Impact: Visiting a malicious website may lead to user interface spoofing Description: This issue was addressed through improved state management.

CVE-2025-43414 [MEDIUM] CVE-2025-43414: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43414 Component: Shortcuts Impact: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app Description: A permissions issue was addressed with improved validation.