Apple Macos Sequoia vulnerabilities

CVE-2025-43229 [MEDIUM] CVE-2025-43229: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43229 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: This issue was addressed through improved state management.

CVE-2025-46310 [MEDIUM] CVE-2025-46310: macOS Sequoia 15.7.4 Apple Security Update: About the security content of macOS Sequoia 15.7.4 Product: macOS Sequoia Version: 15.7.4 CVE: CVE-2025-46310 Component: PackageKit Impact: An attacker with root privileges may be able to delete protected system files Description: This issue was addressed through improved state management.

CVE-2024-44296 [MEDIUM] CVE-2024-44296: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44296 Component: WebKit Impact: Processing maliciously crafted web content may prevent Content Security Policy from being enforced Description: The issue was addressed with improved checks.

CVE-2024-44190 [MEDIUM] CVE-2024-44190: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-44190 Component: System Settings Impact: An app may be able to read arbitrary files Description: A path handling issue was addressed with improved validation.

CVE-2024-54520 [MEDIUM] CVE-2024-54520: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54520 Component: System Settings Impact: An app may be able to overwrite arbitrary files Description: A path handling issue was addressed with improved validation.

CVE-2025-43308 [MEDIUM] CVE-2025-43308: macOS Sequoia 15.7 Apple Security Update: About the security content of macOS Sequoia 15.7 Product: macOS Sequoia Version: 15.7 CVE: CVE-2025-43308 Component: Touch Bar Controls Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks.

CVE-2026-20673 [MEDIUM] CVE-2026-20673: macOS Sequoia 15.7.4 Apple Security Update: About the security content of macOS Sequoia 15.7.4 Product: macOS Sequoia Version: 15.7.4 CVE: CVE-2026-20673 Component: Mail Impact: Turning off "Load remote content in messages” may not apply to all mail previews Description: A logic issue was addressed with improved checks.

CVE-2025-5918 [LOW] CVE-2025-5918: macOS Sequoia 15.7.3 Apple Security Update: About the security content of macOS Sequoia 15.7.3 Product: macOS Sequoia Version: 15.7.3 CVE: CVE-2025-5918 Component: CVE-2025-5918

CVE-2024-54507 [MEDIUM] CVE-2024-54507: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54507 Component: Kernel Impact: An attacker with user privileges may be able to read kernel memory Description: A type confusion issue was addressed with improved memory handling.

CVE-2025-24270 [MEDIUM] CVE-2025-24270: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24270 Component: AirPlay Impact: An attacker on the local network may be able to leak sensitive user information Description: This issue was addressed by removing the vulnerable code.

CVE-2024-44246 [MEDIUM] CVE-2024-44246: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-44246 Component: Safari Impact: On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address to the website Description: The issue was addressed with improved routing of Safari-originated requests.

CVE-2025-43416 [MEDIUM] CVE-2025-43416: macOS Sequoia 15.7.3 Apple Security Update: About the security content of macOS Sequoia 15.7.3 Product: macOS Sequoia Version: 15.7.3 CVE: CVE-2025-43416 Component: StorageKit Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2025-43519 [MEDIUM] CVE-2025-43519: macOS Sequoia 15.7.3 Apple Security Update: About the security content of macOS Sequoia 15.7.3 Product: macOS Sequoia Version: 15.7.3 CVE: CVE-2025-43519 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2024-54500 [MEDIUM] CVE-2024-54500: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54500 Component: ImageIO Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks.

CVE-2024-54524 [MEDIUM] CVE-2024-54524: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54524 Component: SharedFileList Impact: A malicious app may be able to access arbitrary files Description: A logic issue was addressed with improved file handling.

CVE-2025-24096 [MEDIUM] CVE-2025-24096: macOS Sequoia 15.3 Apple Security Update: About the security content of macOS Sequoia 15.3 Product: macOS Sequoia Version: 15.3 CVE: CVE-2025-24096 Component: NSDocument Impact: A malicious app may be able to access arbitrary files Description: This issue was addressed through improved state management.

CVE-2026-20625 [MEDIUM] CVE-2026-20625: macOS Sequoia 15.7.4 Apple Security Update: About the security content of macOS Sequoia 15.7.4 Product: macOS Sequoia Version: 15.7.4 CVE: CVE-2026-20625 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2024-54466 [MEDIUM] CVE-2024-54466: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54466 Component: DiskArbitration Impact: An encrypted volume may be accessed by a different user without prompting for the password Description: An authorization issue was addressed with improved state management.

CVE-2025-43382 [MEDIUM] CVE-2025-43382: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43382 Component: CoreServices Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2025-43463 [MEDIUM] CVE-2025-43463: macOS Sequoia 15.7.3 Apple Security Update: About the security content of macOS Sequoia 15.7.3 Product: macOS Sequoia Version: 15.7.3 CVE: CVE-2025-43463 Component: StorageKit Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.