Apple Macos Sequoia vulnerabilities

CVE-2025-24277 [HIGH] CVE-2025-24277: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24277 Component: Crash Reporter Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2024-44259 [HIGH] CVE-2024-44259: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44259 Component: Safari Downloads Impact: An attacker may be able to misuse a trust relationship to download malicious content Description: This issue was addressed through improved state management.

CVE-2025-24256 [CRITICAL] CVE-2025-24256: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24256 Component: GPU Drivers Impact: An app may be able to disclose kernel memory Description: The issue was addressed with improved bounds checks.

CVE-2025-24267 [HIGH] CVE-2025-24267: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24267 Component: DiskArbitration Impact: An app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions.

CVE-2024-54508 [HIGH] CVE-2024-54508: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54508 Component: WebKit Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: The issue was addressed with improved memory handling.

CVE-2024-54515 [HIGH] CVE-2024-54515: macOS Sequoia 15.2 Apple Security Update: About the security content of macOS Sequoia 15.2 Product: macOS Sequoia Version: 15.2 CVE: CVE-2024-54515 Component: SharedFileList Impact: A malicious app may be able to gain root privileges Description: A logic issue was addressed with improved restrictions.

CVE-2025-24258 [HIGH] CVE-2025-24258: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24258 Component: DiskArbitration Impact: An app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions.

CVE-2025-30453 [HIGH] CVE-2025-30453: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-30453 Component: DiskArbitration Impact: A malicious app may be able to gain root privileges Description: The issue was addressed with additional permissions checks.

CVE-2025-43472 [HIGH] CVE-2025-43472: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43472 Component: Audio Impact: An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging Description: A logging issue was addressed with improved data redaction.

CVE-2025-43387 [HIGH] CVE-2025-43387: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-43387 Component: DiskArbitration Impact: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43268 [HIGH] CVE-2025-43268: macOS Sequoia 15.6 Apple Security Update: About the security content of macOS Sequoia 15.6 Product: macOS Sequoia Version: 15.6 CVE: CVE-2025-43268 Component: Kernel Impact: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43527 [HIGH] CVE-2025-43527: macOS Sequoia 15.7.3 Apple Security Update: About the security content of macOS Sequoia 15.7.3 Product: macOS Sequoia Version: 15.7.3 CVE: CVE-2025-43527 Component: StorageKit Impact: An app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions.

CVE-2024-44238 [HIGH] CVE-2024-44238: macOS Sequoia 15.1 Apple Security Update: About the security content of macOS Sequoia 15.1 Product: macOS Sequoia Version: 15.1 CVE: CVE-2024-44238 Component: IOMobileFrameBuffer Impact: An app may be able to corrupt coprocessor memory Description: The issue was addressed with improved bounds checks.

CVE-2025-31213 [HIGH] CVE-2025-31213: macOS Sequoia 15.5 Apple Security Update: About the security content of macOS Sequoia 15.5 Product: macOS Sequoia Version: 15.5 CVE: CVE-2025-31213 Component: Security Impact: An app may be able to access associated usernames and websites in a user's iCloud Keychain Description: A logging issue was addressed with improved data redaction.

CVE-2025-30465 [CRITICAL] CVE-2025-30465: macOS Sequoia 15.7.2 Apple Security Update: About the security content of macOS Sequoia 15.7.2 Product: macOS Sequoia Version: 15.7.2 CVE: CVE-2025-30465 Component: Shortcuts Impact: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app Description: A permissions issue was addressed with improved validation.

CVE-2024-44165 [HIGH] CVE-2024-44165: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-44165 Component: Kernel Impact: Network traffic may leak outside a VPN tunnel Description: A logic issue was addressed with improved checks.

CVE-2025-24169 [HIGH] CVE-2025-24169: macOS Sequoia 15.3 Apple Security Update: About the security content of macOS Sequoia 15.3 Product: macOS Sequoia Version: 15.3 CVE: CVE-2025-24169 Component: Passwords Impact: A malicious app may be able to bypass browser extension authentication Description: A logging issue was addressed with improved data redaction.

CVE-2025-24246 [CRITICAL] CVE-2025-24246: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24246 Component: OpenSSH Impact: An app may be able to access user-sensitive data Description: An injection issue was addressed with improved validation.

CVE-2024-40848 [HIGH] CVE-2024-40848: macOS Sequoia 15 Apple Security Update: About the security content of macOS Sequoia 15 Product: macOS Sequoia Version: 15 CVE: CVE-2024-40848 Component: AppleMobileFileIntegrity Impact: An attacker may be able to read sensitive information Description: A downgrade issue was addressed with additional code-signing restrictions.

CVE-2025-24172 [CRITICAL] CVE-2025-24172: macOS Sequoia 15.4 Apple Security Update: About the security content of macOS Sequoia 15.4 Product: macOS Sequoia Version: 15.4 CVE: CVE-2025-24172 Component: Mail Impact: "Block All Remote Content" may not apply for all mail previews Description: A permissions issue was addressed with additional sandbox restrictions.