Apple Macos Sonoma vulnerabilities

CVE-2024-44218 [HIGH] CVE-2024-44218: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44218 Component: SceneKit Impact: Processing a maliciously crafted file may lead to heap corruption Description: This issue was addressed with improved checks.

CVE-2024-23294 [HIGH] CVE-2024-23294: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23294 Component: QuartzCore Impact: Processing malicious input may lead to code execution Description: This issue was addressed by removing the vulnerable code.

CVE-2025-43401 [HIGH] CVE-2025-43401: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43401 Component: CoreAnimation Impact: A remote attacker may be able to cause a denial-of-service Description: A denial-of-service issue was addressed with improved validation.

CVE-2025-30449 [HIGH] CVE-2025-30449: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30449 Component: StorageKit Impact: An app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions.

CVE-2023-42826 [HIGH] CVE-2023-42826: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-42826 Component: Model I/O Impact: Processing a file may lead to arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2024-27824 [HIGH] CVE-2024-27824: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27824 Component: PackageKit Impact: An app may be able to elevate privileges Description: This issue was addressed by removing the vulnerable code.

CVE-2025-31243 [HIGH] CVE-2025-31243: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-31243 Component: AppleMobileFileIntegrity Impact: An app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions.

CVE-2024-27798 [HIGH] CVE-2024-27798: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27798 Component: StorageKit Impact: An attacker may be able to elevate privileges Description: An authorization issue was addressed with improved state management.

CVE-2024-27848 [HIGH] CVE-2024-27848: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27848 Component: StorageKit Impact: A malicious app may be able to gain root privileges Description: This issue was addressed with improved permissions checking.

CVE-2025-24177 [HIGH] CVE-2025-24177: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24177 Component: AirPlay Impact: An attacker on the local network may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved input validation.

CVE-2025-24207 [CRITICAL] CVE-2025-24207: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24207 Component: Storage Management Impact: An app may be able to enable iCloud storage features without user consent Description: A permissions issue was addressed with additional restrictions.

CVE-2025-24247 [CRITICAL] CVE-2025-24247: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24247 Component: WindowServer Impact: An attacker may be able to cause unexpected app termination Description: A type confusion issue was addressed with improved checks.

CVE-2025-43261 [CRITICAL] CVE-2025-43261: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43261 Component: File Bookmark Impact: An app may be able to break out of its sandbox Description: A logic issue was addressed with improved checks.

CVE-2025-24259 [CRITICAL] CVE-2025-24259: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24259 Component: Parental Controls Impact: An app may be able to retrieve Safari bookmarks without an entitlement check Description: This issue was addressed with additional entitlement checks.

CVE-2023-42835 [HIGH] CVE-2023-42835: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42835 Component: RemoteViewServices Impact: An attacker may be able to access user data Description: A logic issue was addressed with improved checks.

CVE-2025-43244 [CRITICAL] CVE-2025-43244: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43244 Component: AMD Impact: An app may be able to cause unexpected system termination Description: A race condition was addressed with improved state handling.

CVE-2024-24795 [MEDIUM] CVE-2024-24795: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-24795 Component: AirDrop Impact: A file received from AirDrop may not have the quarantine flag applied Description: This issue was addressed through improved state management.

CVE-2023-41076 [HIGH] CVE-2023-41076: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41076 Component: Windows Installer Impact: An app may be able to elevate privileges Description: This issue was addressed by removing the vulnerable code.

CVE-2025-30432 [MEDIUM] CVE-2025-30432: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30432 Component: Kernel Impact: A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures Description: A logic issue was addressed with improved state management.

CVE-2025-27113 [LOW] CVE-2025-27113: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-27113 Component: CVE-2025-27113