Apple Macos Sequoia vulnerabilities

CVE-2025-31202 [MEDIUM] CVE-2025-31202: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-31202 Component: AirPlay Impact: An attacker on the local network may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved input validation.

CVE-2025-24184 [MEDIUM] CVE-2025-24184: macOS Sequoia 15.3 Apple Security Update: About the security content of macOS Sequoia 15.3 Product: macOS Sequoia Version: 15.3 CVE: CVE-2025-24184 Component: CoreMedia Playback Impact: An app may be able to cause unexpected system termination Description: The issue was addressed with improved memory handling.

CVE-2026-20602 [MEDIUM] CVE-2026-20602: macOS Sequoia 15.7.4 Apple Security Update: About the security content of macOS Sequoia 15.7.4 Product: macOS Sequoia Version: 15.7.4 CVE: CVE-2026-20602 Component: WindowServer Impact: An app may be able to cause a denial-of-service Description: The issue was addressed with improved handling of caches.

CVE-2025-43260 [MEDIUM] CVE-2025-43260: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43260 Component: PackageKit Impact: An app may be able to hijack entitlements granted to other privileged apps Description: This issue was addressed with improved data protection.

CVE-2025-43266 [MEDIUM] CVE-2025-43266: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43266 Component: NSSpellChecker Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional restrictions.

CVE-2025-24160 [MEDIUM] CVE-2025-24160: macOS Sequoia 15.3 Apple Security Update: About the security content of macOS Sequoia 15.3 Product: macOS Sequoia Version: 15.3 CVE: CVE-2025-24160 Component: CoreAudio Impact: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved checks.

CVE-2025-24240 [MEDIUM] CVE-2025-24240: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24240 Component: StorageKit Impact: An app may be able to access user-sensitive data Description: A race condition was addressed with additional validation.

CVE-2025-24216 [MEDIUM] CVE-2025-24216: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24216 Component: WebKit Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: The issue was addressed with improved memory handling.

CVE-2025-31239 [MEDIUM] CVE-2025-31239: macOS Sequoia 15.5 Apple Security Update: About the security content of macOS Sequoia 15.5 Product: macOS Sequoia Version: 15.5 CVE: CVE-2025-31239 Component: CoreMedia Impact: Parsing a file may lead to an unexpected app termination Description: A use-after-free issue was addressed with improved memory management.

CVE-2024-54535 [MEDIUM] CVE-2024-54535: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-54535 Component: Calendar Impact: An attacker with access to calendar data could also read reminders Description: A path handling issue was addressed with improved logic.

CVE-2025-43355 [MEDIUM] CVE-2025-43355: macOS Sequoia 15.7 Apple Security Update: About the security content of macOS Sequoia 15.7 Product: macOS Sequoia Version: 15.7 CVE: CVE-2025-43355 Component: MobileStorageMounter Impact: An app may be able to cause a denial-of-service Description: A type confusion issue was addressed with improved memory handling.

CVE-2024-23237 [MEDIUM] CVE-2024-23237: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-23237 Component: Wi-Fi Impact: An app may be able to cause a denial-of-service Description: The issue was addressed with improved memory handling.

CVE-2025-31264 [MEDIUM] CVE-2025-31264: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-31264 Component: Logging Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction.

CVE-2025-30425 [MEDIUM] CVE-2025-30425: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-30425 Component: WebKit Impact: A malicious website may be able to track users in Safari private browsing mode Description: This issue was addressed through improved state management.

CVE-2025-30467 [MEDIUM] CVE-2025-30467: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-30467 Component: Safari Impact: Visiting a malicious website may lead to address bar spoofing Description: The issue was addressed with improved checks.

CVE-2025-24279 [MEDIUM] CVE-2025-24279: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24279 Component: Voice Control Impact: An app may be able to access contacts Description: This issue was addressed with improved file handling.

CVE-2024-44260 [MEDIUM] CVE-2024-44260: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44260 Component: Assets Impact: A malicious app with root privileges may be able to modify the contents of system files Description: This issue was addressed by removing the vulnerable code.

CVE-2025-43336 [MEDIUM] CVE-2025-43336: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43336 Component: SoftwareUpdate Impact: An app with root privileges may be able to access private information Description: A permissions issue was addressed with additional restrictions.

CVE-2025-24199 [MEDIUM] CVE-2025-24199: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24199 Component: Foundation Impact: An app may be able to cause a denial-of-service Description: An uncontrolled format string issue was addressed with improved input validation.

CVE-2025-43235 [MEDIUM] CVE-2025-43235: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43235 Component: Power Management Impact: An app may be able to cause a denial-of-service Description: The issue was addressed with improved memory handling.