Apple Macos Sonoma vulnerabilities

CVE-2023-4735 [HIGH] CVE-2023-4735: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-4735 Component: CVE-2023-4735

CVE-2024-23268 [HIGH] CVE-2024-23268: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23268 Component: PackageKit Impact: An app may be able to elevate privileges Description: An injection issue was addressed with improved input validation.

CVE-2024-23274 [HIGH] CVE-2024-23274: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23274 Component: PackageKit Impact: An app may be able to elevate privileges Description: An injection issue was addressed with improved input validation.

CVE-2024-23276 [HIGH] CVE-2024-23276: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23276 Component: Admin Framework Impact: An app may be able to elevate privileges Description: A logic issue was addressed with improved checks.

CVE-2025-31188 [HIGH] CVE-2025-31188: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-31188 Component: StorageKit Impact: An app may be able to bypass Privacy preferences Description: A race condition was addressed with additional validation.

CVE-2024-27843 [HIGH] CVE-2024-27843: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27843 Component: SharedFileList Impact: An app may be able to elevate privileges Description: A logic issue was addressed with improved checks.

CVE-2025-43476 [HIGH] CVE-2025-43476: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43476 Component: SharedFileList Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43407 [HIGH] CVE-2025-43407: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43407 Component: Assets Impact: An app may be able to break out of its sandbox Description: This issue was addressed with improved entitlements.

CVE-2025-43364 [HIGH] CVE-2025-43364: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43364 Component: NetFSFramework Impact: An app may be able to break out of its sandbox Description: A race condition was addressed with additional validation.

CVE-2025-24120 [HIGH] CVE-2025-24120: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24120 Component: WindowServer Impact: An attacker may be able to cause unexpected app termination Description: This issue was addressed by improved management of object lifetimes.

CVE-2025-30424 [CRITICAL] CVE-2025-30424: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30424 Component: Photos Storage Impact: Deleting a conversation in Messages may expose user contact information in system logging Description: A logging issue was addressed with improved data redaction.

CVE-2025-24102 [CRITICAL] CVE-2025-24102: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24102 Component: CoreRoutine Impact: An app may be able to determine a user’s current location Description: The issue was addressed with improved checks.

CVE-2024-54551 [HIGH] CVE-2024-54551: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-54551 Component: WebKit Impact: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved memory handling.

CVE-2025-24146 [CRITICAL] CVE-2025-24146: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24146 Component: Photos Storage Impact: Deleting a conversation in Messages may expose user contact information in system logging Description: This issue was addressed with improved redaction of sensitive information.

CVE-2025-43243 [CRITICAL] CVE-2025-43243: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43243 Component: Software Update Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.

CVE-2025-31219 [HIGH] CVE-2025-31219: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31219 Component: Kernel Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling.

CVE-2024-54533 [HIGH] CVE-2024-54533: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2024-54533 Component: Spotlight Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2025-31232 [HIGH] CVE-2025-31232: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31232 Component: Installer Impact: A sandboxed app may be able to access sensitive user data Description: A logic issue was addressed with improved checks.

CVE-2025-31233 [MEDIUM] CVE-2025-31233: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31233 Component: CoreMedia Impact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory Description: The issue was addressed with improved input sanitization.

CVE-2025-31209 [MEDIUM] CVE-2025-31209: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31209 Component: CoreGraphics Impact: Parsing a file may lead to disclosure of user information Description: An out-of-bounds read was addressed with improved bounds checking.