Apple Macos Sonoma vulnerabilities

CVE-2023-42891 [MEDIUM] CVE-2023-42891: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42891 Component: IOKit Impact: An app may be able to monitor keystrokes without user permission Description: An authentication issue was addressed with improved state management.

CVE-2025-31251 [MEDIUM] CVE-2025-31251: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31251 Component: AppleJPEG Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: The issue was addressed with improved input sanitization.

CVE-2025-30438 [MEDIUM] CVE-2025-30438: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30438 Component: Share Sheet Impact: A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started Description: This issue was addressed with improved access restrictions.

CVE-2025-24205 [MEDIUM] CVE-2025-24205: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24205 Component: Siri Impact: An app may be able to access user-sensitive data Description: An authorization issue was addressed with improved state management.

CVE-2025-24278 [MEDIUM] CVE-2025-24278: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24278 Component: System Settings Impact: An app may be able to access protected user data Description: This issue was addressed with improved validation of symlinks.

CVE-2025-30443 [MEDIUM] CVE-2025-30443: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30443 Component: AppleMobileFileIntegrity Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed by removing the vulnerable code.

CVE-2024-44269 [MEDIUM] CVE-2024-44269: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44269 Component: Shortcuts Impact: A malicious app may use shortcuts to access restricted files Description: A logic issue was addressed with improved checks.

CVE-2025-43190 [MEDIUM] CVE-2025-43190: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43190 Component: Spell Check Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2024-23231 [MEDIUM] CVE-2024-23231: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23231 Component: Share Sheet Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2024-44254 [MEDIUM] CVE-2024-44254: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44254 Component: Shortcuts Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-27871 [MEDIUM] CVE-2024-27871: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-27871 Component: Sandbox Impact: An app may be able to access protected user data Description: A path handling issue was addressed with improved validation.

CVE-2024-27806 [MEDIUM] CVE-2024-27806: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27806 Component: CVE-2024-27806

CVE-2024-44281 [MEDIUM] CVE-2024-44281: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44281 Component: Shortcuts Impact: A malicious app may use shortcuts to access restricted files Description: A logic issue was addressed with improved checks.

CVE-2024-27884 [MEDIUM] CVE-2024-27884: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27884 Component: Transparency Impact: An app may be able to access user-sensitive data Description: This issue was addressed with a new entitlement.

CVE-2024-44178 [MEDIUM] CVE-2024-44178: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44178 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved validation of symlinks.

CVE-2025-43314 [MEDIUM] CVE-2025-43314: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43314 Component: StorageKit Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2024-44153 [MEDIUM] CVE-2024-44153: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44153 Component: Accounts Impact: An app may be able to access user-sensitive data Description: The issue was addressed with improved permissions logic.

CVE-2024-27805 [MEDIUM] CVE-2024-27805: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27805 Component: Core Data Impact: An app may be able to access sensitive user data Description: An issue was addressed with improved validation of environment variables.

CVE-2024-44278 [MEDIUM] CVE-2024-44278: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44278 Component: Siri Impact: A sandboxed app may be able to access sensitive user data in system logs Description: An information disclosure issue was addressed with improved private data redaction for log entries.

CVE-2025-43417 [MEDIUM] CVE-2025-43417: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2025-43417 Component: File Bookmark Impact: An app may be able to access user-sensitive data Description: A path handling issue was addressed with improved logic.