Apple Macos Sonoma vulnerabilities

CVE-2025-43248 [HIGH] CVE-2025-43248: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43248 Component: AppleMobileFileIntegrity Impact: A malicious app may be able to gain root privileges Description: A logic issue was addressed with improved restrictions.

CVE-2025-43249 [HIGH] CVE-2025-43249: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43249 Component: AppleMobileFileIntegrity Impact: An app may be able to gain root privileges Description: A logic issue was addressed with improved checks.

CVE-2023-42848 [HIGH] CVE-2023-42848: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42848 Component: ImageIO Impact: Processing a maliciously crafted image may lead to heap corruption Description: The issue was addressed with improved bounds checks.

CVE-2025-43256 [HIGH] CVE-2025-43256: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43256 Component: StorageKit Impact: An app may be able to gain root privileges Description: This issue was addressed through improved state management.

CVE-2025-24253 [CRITICAL] CVE-2025-24253: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24253 Component: StorageKit Impact: An app may be able to access protected user data Description: This issue was addressed with improved handling of symlinks.

CVE-2025-31279 [CRITICAL] CVE-2025-31279: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-31279 Component: Find My Impact: An app may be able to fingerprint the user Description: A permissions issue was addressed with additional restrictions.

CVE-2025-31240 [HIGH] CVE-2025-31240: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31240 Component: About Apple security updates Impact: Connecting to a malicious AFP server may corrupt kernel memory Description: The issue was addressed with improved memory handling.

CVE-2025-31237 [HIGH] CVE-2025-31237: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31237 Component: About Apple security updates Impact: Connecting to a malicious AFP server may corrupt kernel memory Description: The issue was addressed with improved memory handling.

CVE-2024-44289 [HIGH] CVE-2024-44289: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44289 Component: Find My Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-43494 [HIGH] CVE-2025-43494: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43494 Component: Mail Impact: An attacker may be able to cause a persistent denial-of-service Description: A mail header parsing issue was addressed with improved checks.

CVE-2025-43184 [CRITICAL] CVE-2025-43184: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43184 Component: Shortcuts Impact: A shortcut may be able to bypass sensitive Shortcuts app settings Description: This issue was addressed by adding an additional prompt for user consent.

CVE-2025-43194 [CRITICAL] CVE-2025-43194: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43194 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks.

CVE-2024-44256 [HIGH] CVE-2024-44256: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44256 Component: Messages Impact: An app may be able to break out of its sandbox Description: The issue was addressed with improved input sanitization.

CVE-2025-31189 [HIGH] CVE-2025-31189: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-31189 Component: Disk Images Impact: An app may be able to break out of its sandbox Description: A file quarantine bypass was addressed with additional checks.

CVE-2023-40407 [HIGH] CVE-2023-40407: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40407 Component: CUPS Impact: A remote attacker may be able to cause a denial-of-service Description: The issue was addressed with improved bounds checks.

CVE-2024-40803 [HIGH] CVE-2024-40803: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40803 Component: Keychain Access Impact: An attacker may be able to cause unexpected app termination Description: A type confusion issue was addressed with improved checks.

CVE-2023-32359 [HIGH] CVE-2023-32359: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-32359 Component: WebKit Impact: A user's password may be read aloud by VoiceOver Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-27801 [HIGH] CVE-2024-27801: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27801 Component: Foundation Impact: An app may be able to elevate privileges Description: The issue was addressed with improved checks.

CVE-2023-32396 [HIGH] CVE-2023-32396: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-32396 Component: Dev Tools Impact: An app may be able to gain elevated privileges Description: This issue was addressed with improved checks.

CVE-2025-24173 [HIGH] CVE-2025-24173: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24173 Component: Power Services Impact: An app may be able to break out of its sandbox Description: This issue was addressed with additional entitlement checks.