Apple Macos Sonoma vulnerabilities

CVE-2024-27830 [MEDIUM] CVE-2024-27830: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27830 Component: WebKit Canvas Impact: A maliciously crafted webpage may be able to fingerprint the user Description: This issue was addressed through improved state management.

CVE-2024-27800 [MEDIUM] CVE-2024-27800: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27800 Component: Messages Impact: Processing a maliciously crafted message may lead to a denial-of-service Description: This issue was addressed by removing the vulnerable code.

CVE-2025-43538 [MEDIUM] CVE-2025-43538: macOS Sonoma 14.8.3 Apple Security Update: About the security content of macOS Sonoma 14.8.3 Product: macOS Sonoma Version: 14.8.3 CVE: CVE-2025-43538 Component: Screen Time Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction.

CVE-2024-54564 [MEDIUM] CVE-2024-54564: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-54564 Component: AirDrop Impact: A file received from AirDrop may not have the quarantine flag applied Description: This issue was addressed through improved state management.

CVE-2024-23218 [MEDIUM] CVE-2024-23218: macOS Sonoma 14.3 Apple Security Update: About the security content of macOS Sonoma 14.3 Product: macOS Sonoma Version: 14.3 CVE: CVE-2024-23218 Component: CoreCrypto Impact: An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key Description: A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions.

CVE-2024-44176 [MEDIUM] CVE-2024-44176: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44176 Component: ImageIO Impact: Processing an image may lead to a denial-of-service Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2024-44213 [MEDIUM] CVE-2024-44213: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44213 Component: CUPS Impact: An attacker in a privileged network position may be able to leak sensitive user information Description: An issue existed in the parsing of URLs. This issue was addressed with improved input validation.

CVE-2024-40777 [MEDIUM] CVE-2024-40777: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40777 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2020-19189 [MEDIUM] CVE-2020-19189: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19189 Component: CVE-2020-19189

CVE-2020-19186 [MEDIUM] CVE-2020-19186: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19186 Component: CVE-2020-19186

CVE-2020-19185 [MEDIUM] CVE-2020-19185: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19185 Component: CVE-2020-19185

CVE-2020-19188 [MEDIUM] CVE-2020-19188: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19188 Component: CVE-2020-19188

CVE-2020-19187 [MEDIUM] CVE-2020-19187: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19187 Component: CVE-2020-19187

CVE-2024-40799 [HIGH] CVE-2024-40799: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40799 Component: CoreGraphics Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2023-6277 [MEDIUM] CVE-2023-6277: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2023-6277 Component: CVE-2023-6277

CVE-2024-23216 [HIGH] CVE-2024-23216: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23216 Component: PackageKit Impact: An app may be able to overwrite arbitrary files Description: A path handling issue was addressed with improved validation.

CVE-2024-54497 [MEDIUM] CVE-2024-54497: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2024-54497 Component: QuartzCore Impact: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved checks.

CVE-2024-23271 [MEDIUM] CVE-2024-23271: macOS Sonoma 14.3 Apple Security Update: About the security content of macOS Sonoma 14.3 Product: macOS Sonoma Version: 14.3 CVE: CVE-2024-23271 Component: WebKit Impact: A malicious website may cause unexpected cross-origin behavior Description: A logic issue was addressed with improved checks.

CVE-2025-24157 [MEDIUM] CVE-2025-24157: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24157 Component: Xsan Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2023-42898 [MEDIUM] CVE-2023-42898: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42898 Component: ImageIO Impact: Processing an image may lead to arbitrary code execution Description: The issue was addressed with improved memory handling.