Apple Macos Sequoia vulnerabilities

CVE-2025-43389 [MEDIUM] CVE-2025-43389: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43389 Component: Notes Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed by removing the vulnerable code.

CVE-2025-43469 [MEDIUM] CVE-2025-43469: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43469 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2025-31248 [MEDIUM] CVE-2025-31248: macOS Sequoia 15.5 Apple Security Update: About the security content of macOS Sequoia 15.5 Product: macOS Sequoia Version: 15.5 CVE: CVE-2025-31248 Component: UserAccountUpdater Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2025-43468 [MEDIUM] CVE-2025-43468: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43468 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2025-24140 [MEDIUM] CVE-2025-24140: macOS Sequoia 15.3 Apple Security Update: About the security content of macOS Sequoia 15.3 Product: macOS Sequoia Version: 15.3 CVE: CVE-2025-24140 Component: FaceTime Impact: An app may be able to access user-sensitive data Description: An information disclosure issue was addressed with improved privacy controls.

CVE-2024-44212 [MEDIUM] CVE-2024-44212: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44212 Component: WebKit Impact: Cookies belonging to one origin may be sent to another origin Description: A cookie management issue was addressed with improved state management.

CVE-2025-24097 [MEDIUM] CVE-2025-24097: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24097 Component: AirDrop Impact: An app may be able to read arbitrary file metadata Description: A permissions issue was addressed with additional restrictions.

CVE-2025-24198 [MEDIUM] CVE-2025-24198: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24198 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2025-24251 [MEDIUM] CVE-2025-24251: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24251 Component: AirPlay Impact: An attacker on the local network may cause an unexpected app termination Description: The issue was addressed with improved checks.

CVE-2025-30445 [MEDIUM] CVE-2025-30445: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-30445 Component: AirPlay Impact: An attacker on the local network may cause an unexpected app termination Description: A type confusion issue was addressed with improved checks.

CVE-2025-31203 [MEDIUM] CVE-2025-31203: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-31203 Component: CoreUtils Impact: An attacker on the local network may be able to cause a denial-of-service Description: An integer overflow was addressed with improved input validation.

CVE-2024-54523 [MEDIUM] CVE-2024-54523: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54523 Component: IOMobileFrameBuffer Impact: An app may be able to corrupt coprocessor memory Description: The issue was addressed with improved bounds checks.

CVE-2025-24115 [MEDIUM] CVE-2025-24115: macOS Sequoia 15.3 Apple Security Update: About the security content of macOS Sequoia 15.3 Product: macOS Sequoia Version: 15.3 CVE: CVE-2025-24115 Component: LaunchServices Impact: An app may be able to read files outside of its sandbox Description: A path handling issue was addressed with improved validation.

CVE-2025-31218 [MEDIUM] CVE-2025-31218: macOS Sequoia 15.5 Apple Security Update: About the security content of macOS Sequoia 15.5 Product: macOS Sequoia Version: 15.5 CVE: CVE-2025-31218 Component: NetworkExtension Impact: An app may be able to observe the hostnames of new network connections Description: This issue was addressed by removing the vulnerable code.

CVE-2024-54565 [MEDIUM] CVE-2024-54565: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54565 Component: XProtect Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved checks.

CVE-2024-44145 [MEDIUM] CVE-2024-44145: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-44145 Component: Sidecar Impact: An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen Description: This issue was addressed through improved state management.

CVE-2024-44282 [MEDIUM] CVE-2024-44282: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44282 Component: Foundation Impact: Parsing a file may lead to disclosure of user information Description: An out-of-bounds read was addressed with improved input validation.

CVE-2024-44175 [MEDIUM] CVE-2024-44175: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-44175 Component: Kernel Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved validation of symlinks.

CVE-2024-44240 [MEDIUM] CVE-2024-44240: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44240 Component: CoreText Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: The issue was addressed with improved checks.

CVE-2024-44302 [MEDIUM] CVE-2024-44302: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44302 Component: CoreText Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: The issue was addressed with improved checks.