Apple Macos Sonoma vulnerabilities

CVE-2023-42947 [HIGH] CVE-2023-42947: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42947 Component: TCC Impact: An app may be able to break out of its sandbox Description: A path handling issue was addressed with improved validation.

CVE-2025-24255 [HIGH] CVE-2025-24255: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24255 Component: Disk Images Impact: An app may be able to break out of its sandbox Description: A file access issue was addressed with improved input validation.

CVE-2025-24137 [HIGH] CVE-2025-24137: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24137 Component: AirPlay Impact: An attacker on the local network may corrupt process memory Description: A type confusion issue was addressed with improved checks.

CVE-2023-42906 [HIGH] CVE-2023-42906: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42906 Component: AppleGraphicsControl Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2025-30471 [HIGH] CVE-2025-30471: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30471 Component: Security Impact: A remote user may be able to cause a denial-of-service Description: A validation issue was addressed with improved logic.

CVE-2024-27829 [HIGH] CVE-2024-27829: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27829 Component: AppleVA Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved memory handling.

CVE-2025-24129 [HIGH] CVE-2025-24129: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24129 Component: AirPlay Impact: An attacker on the local network may cause an unexpected app termination Description: A type confusion issue was addressed with improved checks.

CVE-2025-7424 [HIGH] CVE-2025-7424: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-7424 Component: LaunchServices Impact: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: This issue was addressed through improved state management.

CVE-2023-42847 [HIGH] CVE-2023-42847: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42847 Component: Passkeys Impact: An attacker may be able to access passkeys without authentication Description: A logic issue was addressed with improved checks.

CVE-2024-27842 [HIGH] CVE-2024-27842: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27842 Component: Transparency Impact: An app may be able to access user-sensitive data Description: This issue was addressed with a new entitlement.

CVE-2023-38615 [HIGH] CVE-2023-38615: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-38615 Component: AMD Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2024-44255 [HIGH] CVE-2024-44255: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44255 Component: App Support Impact: A malicious app may be able to run arbitrary shortcuts without user consent Description: A path handling issue was addressed with improved logic.

CVE-2023-41995 [HIGH] CVE-2023-41995: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41995 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management.

CVE-2025-24234 [HIGH] CVE-2025-24234: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24234 Component: AccountPolicy Impact: A malicious app may be able to gain root privileges Description: This issue was addressed by removing the vulnerable code.

CVE-2024-23288 [HIGH] CVE-2024-23288: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23288 Component: AppleMobileFileIntegrity Impact: An app may be able to elevate privileges Description: This issue was addressed by removing the vulnerable code.

CVE-2024-40828 [HIGH] CVE-2024-40828: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40828 Component: StorageKit Impact: A malicious app may be able to gain root privileges Description: The issue was addressed with improved checks.

CVE-2025-30457 [CRITICAL] CVE-2025-30457: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30457 Component: SystemMigration Impact: A malicious app may be able to create symlinks to protected regions of the disk Description: This issue was addressed with improved validation of symlinks.

CVE-2025-30442 [HIGH] CVE-2025-30442: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-30442 Component: SoftwareUpdate Impact: An app may be able to gain elevated privileges Description: The issue was addressed with improved input sanitization.

CVE-2025-43223 [HIGH] CVE-2025-43223: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43223 Component: CFNetwork Impact: A non-privileged user may be able to modify restricted network settings Description: A denial-of-service issue was addressed with improved input validation.

CVE-2023-42871 [HIGH] CVE-2023-42871: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-42871 Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.