Apple Macos Sonoma vulnerabilities

CVE-2024-23236 [MEDIUM] CVE-2024-23236: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-23236 Component: CFNetwork Impact: An app may be able to read arbitrary files Description: A correctness issue was addressed with improved checks.

CVE-2024-27827 [MEDIUM] CVE-2024-27827: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27827 Component: Finder Impact: An app may be able to read arbitrary files Description: This issue was addressed through improved state management.

CVE-2024-23272 [MEDIUM] CVE-2024-23272: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23272 Component: Storage Services Impact: An attacker may gain access to protected parts of the file system Description: A logic issue was addressed with improved checks.

CVE-2024-40847 [MEDIUM] CVE-2024-40847: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40847 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: The issue was addressed with additional code-signing restrictions.

CVE-2024-40855 [MEDIUM] CVE-2024-40855: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-40855 Component: DiskArbitration Impact: A sandboxed app may be able to access sensitive user data Description: The issue was addressed with improved checks.

CVE-2023-42935 [MEDIUM] CVE-2023-42935: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42935 Component: LoginWindow Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen Description: An authentication issue was addressed with improved state management.

CVE-2024-44177 [MEDIUM] CVE-2024-44177: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44177 Component: Dock Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed by removing sensitive data.

CVE-2024-44184 [MEDIUM] CVE-2024-44184: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44184 Component: Transparency Impact: An app may be able to access user-sensitive data Description: A permissions issue was addressed with additional restrictions.

CVE-2026-20624 [MEDIUM] CVE-2026-20624: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2026-20624 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: An injection issue was addressed with improved validation.

CVE-2025-43389 [MEDIUM] CVE-2025-43389: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43389 Component: Notes Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed by removing the vulnerable code.

CVE-2025-46283 [MEDIUM] CVE-2025-46283: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2025-46283 Component: CoreServices Impact: An app may be able to access sensitive user data Description: A logic issue was addressed with improved validation.

CVE-2025-43469 [MEDIUM] CVE-2025-43469: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43469 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2024-44205 [MEDIUM] CVE-2024-44205: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-44205 Component: Siri Impact: A sandboxed app may be able to access sensitive user data in system logs Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-31248 [MEDIUM] CVE-2025-31248: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-31248 Component: UserAccountUpdater Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-20670 [MEDIUM] CVE-2026-20670: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2026-20670 Component: AppleEvents Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management.

CVE-2025-43468 [MEDIUM] CVE-2025-43468: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43468 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2025-31235 [MEDIUM] CVE-2025-31235: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31235 Component: Audio Impact: An app may be able to cause unexpected system termination Description: A double free issue was addressed with improved memory management.

CVE-2025-43238 [MEDIUM] CVE-2025-43238: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43238 Component: Xsan Impact: An app may be able to cause unexpected system termination Description: An integer overflow was addressed with improved input validation.

CVE-2024-27816 [MEDIUM] CVE-2024-27816: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27816 Component: AppleMobileFileIntegrity Impact: An attacker may be able to access user data Description: A logic issue was addressed with improved checks.

CVE-2024-27810 [MEDIUM] CVE-2024-27810: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27810 Component: Maps Impact: An app may be able to read sensitive location information Description: A path handling issue was addressed with improved validation.