Apple Macos Sonoma vulnerabilities
960 known vulnerabilities affecting apple/macos_sonoma.
Total CVEs
960
CISA KEV
11
actively exploited
Public exploits
8
Exploited in wild
19
Severity breakdown
CRITICAL73HIGH290MEDIUM533LOW63UNKNOWN1
Vulnerabilities
Page 28 of 48
CVE-2024-40780P4MEDIUMCVSS 5.5v14.62024-07-29
CVE-2024-40780 [MEDIUM] CVE-2024-40780: macOS Sonoma 14.6
Apple Security Update: About the security content of macOS Sonoma 14.6
Product: macOS Sonoma
Version: 14.6
CVE: CVE-2024-40780
Component: WebKit
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: An out-of-bounds read was addressed with improved bounds checking.
apple
CVE-2024-23287P4MEDIUMCVSS 5.5v14.42024-03-07
CVE-2024-23287 [MEDIUM] CVE-2024-23287: macOS Sonoma 14.4
Apple Security Update: About the security content of macOS Sonoma 14.4
Product: macOS Sonoma
Version: 14.4
CVE: CVE-2024-23287
Component: Messages
Impact: An app may be able to access user-sensitive data
Description: A privacy issue was addressed with improved handling of temporary files.
apple
CVE-2025-24103P4MEDIUMCVSS 5.5v14.7.32025-01-27
CVE-2025-24103 [MEDIUM] CVE-2025-24103: macOS Sonoma 14.7.3
Apple Security Update: About the security content of macOS Sonoma 14.7.3
Product: macOS Sonoma
Version: 14.7.3
CVE: CVE-2025-24103
Component: Security
Impact: An app may be able to access protected user data
Description: This issue was addressed with improved validation of symlinks.
apple
CVE-2024-44175P4MEDIUMCVSS 5.5v14.7.12024-10-28
CVE-2024-44175 [MEDIUM] CVE-2024-44175: macOS Sonoma 14.7.1
Apple Security Update: About the security content of macOS Sonoma 14.7.1
Product: macOS Sonoma
Version: 14.7.1
CVE: CVE-2024-44175
Component: Kernel
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved validation of symlinks.
apple
CVE-2024-27789P4MEDIUMCVSS 5.5v14.42024-03-07
CVE-2024-27789 [MEDIUM] CVE-2024-27789: macOS Sonoma 14.4
Apple Security Update: About the security content of macOS Sonoma 14.4
Product: macOS Sonoma
Version: 14.4
CVE: CVE-2024-27789
Component: Foundation
Impact: An app may be able to access user-sensitive data
Description: A logic issue was addressed with improved checks.
apple
CVE-2023-40429P4MEDIUMCVSS 5.5v142023-09-26
CVE-2023-40429 [MEDIUM] CVE-2023-40429: macOS Sonoma 14
Apple Security Update: About the security content of macOS Sonoma 14
Product: macOS Sonoma
Version: 14
CVE: CVE-2023-40429
Component: Kernel
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with improved validation.
apple
CVE-2024-40836P4MEDIUMCVSS 5.5v14.62024-07-29
CVE-2024-40836 [MEDIUM] CVE-2024-40836: macOS Sonoma 14.6
Apple Security Update: About the security content of macOS Sonoma 14.6
Product: macOS Sonoma
Version: 14.6
CVE: CVE-2024-40836
Component: Shortcuts
Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user
Description: A logic issue was addressed with improved checks.
apple
CVE-2024-44196P4MEDIUMCVSS 5.5v14.7.12024-10-28
CVE-2024-44196 [MEDIUM] CVE-2024-44196: macOS Sonoma 14.7.1
Apple Security Update: About the security content of macOS Sonoma 14.7.1
Product: macOS Sonoma
Version: 14.7.1
CVE: CVE-2024-44196
Component: PackageKit
Impact: An app may be able to modify protected parts of the file system
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2024-44279P4MEDIUMCVSS 5.5v14.7.12024-10-28
CVE-2024-44279 [MEDIUM] CVE-2024-44279: macOS Sonoma 14.7.1
Apple Security Update: About the security content of macOS Sonoma 14.7.1
Product: macOS Sonoma
Version: 14.7.1
CVE: CVE-2024-44279
Component: Shortcuts
Impact: A malicious app may use shortcuts to access restricted files
Description: A logic issue was addressed with improved checks.
apple
CVE-2025-24109P4MEDIUMCVSS 5.5v14.7.32025-01-27
CVE-2025-24109 [MEDIUM] CVE-2025-24109: macOS Sonoma 14.7.3
Apple Security Update: About the security content of macOS Sonoma 14.7.3
Product: macOS Sonoma
Version: 14.7.3
CVE: CVE-2025-24109
Component: AppleMobileFileIntegrity
Impact: An app may be able to access sensitive user data
Description: A downgrade issue was addressed with additional code-signing restrictions.
apple
CVE-2024-44151P4MEDIUMCVSS 5.5v14.72024-09-16
CVE-2024-44151 [MEDIUM] CVE-2024-44151: macOS Sonoma 14.7
Apple Security Update: About the security content of macOS Sonoma 14.7
Product: macOS Sonoma
Version: 14.7
CVE: CVE-2024-44151
Component: Automator
Impact: An Automator Quick Action workflow may be able to bypass Gatekeeper
Description: This issue was addressed by adding an additional prompt for user consent.
apple
CVE-2025-31191P4MEDIUMCVSS 5.5v14.7.52025-03-31
CVE-2025-31191 [MEDIUM] CVE-2025-31191: macOS Sonoma 14.7.5
Apple Security Update: About the security content of macOS Sonoma 14.7.5
Product: macOS Sonoma
Version: 14.7.5
CVE: CVE-2025-31191
Component: CoreServices
Impact: An app may be able to access sensitive user data
Description: This issue was addressed through improved state management.
apple
CVE-2023-42823P4MEDIUMCVSS 5.5v14.12023-10-25
CVE-2023-42823 [MEDIUM] CVE-2023-42823: macOS Sonoma 14.1
Apple Security Update: About the security content of macOS Sonoma 14.1
Product: macOS Sonoma
Version: 14.1
CVE: CVE-2023-42823
Component: CVE-2023-42823
apple
CVE-2023-51384P4MEDIUMCVSS 5.5v14.42024-03-07
CVE-2023-51384 [MEDIUM] CVE-2023-51384: macOS Sonoma 14.4
Apple Security Update: About the security content of macOS Sonoma 14.4
Product: macOS Sonoma
Version: 14.4
CVE: CVE-2023-51384
Component: CVE-2023-51384
apple
CVE-2023-40413P4MEDIUMCVSS 5.5v14.12023-10-25
CVE-2023-40413 [MEDIUM] CVE-2023-40413: macOS Sonoma 14.1
Apple Security Update: About the security content of macOS Sonoma 14.1
Product: macOS Sonoma
Version: 14.1
CVE: CVE-2023-40413
Component: Find My
Impact: An app may be able to read sensitive location information
Description: The issue was addressed with improved handling of caches.
apple
CVE-2023-41070P4MEDIUMCVSS 5.5v142023-09-26
CVE-2023-41070 [MEDIUM] CVE-2023-41070: macOS Sonoma 14
Apple Security Update: About the security content of macOS Sonoma 14
Product: macOS Sonoma
Version: 14
CVE: CVE-2023-41070
Component: Share Sheet
Impact: An app may be able to access sensitive data logged when a user shares a link
Description: A logic issue was addressed with improved checks.
apple
CVE-2023-42884P4MEDIUMCVSS 5.5v14.22023-12-11
CVE-2023-42884 [MEDIUM] CVE-2023-42884: macOS Sonoma 14.2
Apple Security Update: About the security content of macOS Sonoma 14.2
Product: macOS Sonoma
Version: 14.2
CVE: CVE-2023-42884
Component: AVEVideoEncoder
Impact: An app may be able to disclose kernel memory
Description: This issue was addressed with improved redaction of sensitive information.
apple
CVE-2024-40779P4MEDIUMCVSS 5.5v14.62024-07-29
CVE-2024-40779 [MEDIUM] CVE-2024-40779: macOS Sonoma 14.6
Apple Security Update: About the security content of macOS Sonoma 14.6
Product: macOS Sonoma
Version: 14.6
CVE: CVE-2024-40779
Component: WebKit
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: An out-of-bounds read was addressed with improved bounds checking.
apple
CVE-2025-24210P4MEDIUMCVSS 5.5v14.7.52025-03-31
CVE-2025-24210 [MEDIUM] CVE-2025-24210: macOS Sonoma 14.7.5
Apple Security Update: About the security content of macOS Sonoma 14.7.5
Product: macOS Sonoma
Version: 14.7.5
CVE: CVE-2025-24210
Component: ImageIO
Impact: Parsing an image may lead to disclosure of user information
Description: A logic error was addressed with improved error handling.
apple
CVE-2024-44215P4MEDIUMCVSS 5.5v14.7.12024-10-28
CVE-2024-44215 [MEDIUM] CVE-2024-44215: macOS Sonoma 14.7.1
Apple Security Update: About the security content of macOS Sonoma 14.7.1
Product: macOS Sonoma
Version: 14.7.1
CVE: CVE-2024-44215
Component: ImageIO
Impact: Processing an image may result in disclosure of process memory
Description: This issue was addressed with improved checks.
apple