Apple Macos Sonoma vulnerabilities

CVE-2025-24144 [MEDIUM] CVE-2025-24144: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-24144 Component: Kernel Impact: An app may be able to leak sensitive kernel state Description: An information disclosure issue was addressed by removing the vulnerable code.

CVE-2024-40860 [MEDIUM] CVE-2024-40860: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40860 Component: Shortcuts Impact: An app may be able to observe data displayed to the user by Shortcuts Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2025-43293 [MEDIUM] CVE-2025-43293: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43293 Component: SharedFileList Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved input validation.

CVE-2024-27887 [MEDIUM] CVE-2024-27887: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-27887 Component: NSSpellChecker Impact: An app may be able to access user-sensitive data Description: A path handling issue was addressed with improved validation.

CVE-2024-54469 [MEDIUM] CVE-2024-54469: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-54469 Component: FileProvider Impact: A local user may be able to leak sensitive user information Description: The issue was addressed with improved checks.

CVE-2025-43446 [MEDIUM] CVE-2025-43446: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43446 Component: Assets Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved validation of symlinks.

CVE-2024-40844 [MEDIUM] CVE-2024-40844: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40844 Component: Shortcuts Impact: An app may be able to observe data displayed to the user by Shortcuts Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2024-40801 [MEDIUM] CVE-2024-40801: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40801 Component: Security Initialization Impact: An app may be able to access protected user data Description: A permissions issue was addressed with additional restrictions.

CVE-2024-40807 [MEDIUM] CVE-2024-40807: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40807 Component: Shortcuts Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: A logic issue was addressed with improved checks.

CVE-2025-31242 [MEDIUM] CVE-2025-31242: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-31242 Component: StoreKit Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2024-44253 [MEDIUM] CVE-2024-44253: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44253 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks.

CVE-2025-43319 [MEDIUM] CVE-2025-43319: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43319 Component: MediaLibrary Impact: An app may be able to access protected user data Description: This issue was addressed by removing the vulnerable code.

CVE-2025-31220 [MEDIUM] CVE-2025-31220: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31220 Component: Weather Impact: A malicious app may be able to read sensitive location information Description: A privacy issue was addressed by removing sensitive data.

CVE-2025-43530 [MEDIUM] CVE-2025-43530: macOS Sonoma 14.8.3 Apple Security Update: About the security content of macOS Sonoma 14.8.3 Product: macOS Sonoma Version: 14.8.3 CVE: CVE-2025-43530 Component: VoiceOver Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved checks.

CVE-2025-43367 [MEDIUM] CVE-2025-43367: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43367 Component: Siri Impact: An app may be able to access protected user data Description: A privacy issue was addressed by moving sensitive data.

CVE-2024-44166 [MEDIUM] CVE-2024-44166: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44166 Component: System Settings Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2024-44182 [MEDIUM] CVE-2024-44182: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44182 Component: App Intents Impact: An app may be able to access sensitive data logged when a shortcut fails to launch another app Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-44181 [MEDIUM] CVE-2024-44181: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44181 Component: Maps Impact: An app may be able to read sensitive location information Description: An issue was addressed with improved handling of temporary files.

CVE-2024-44135 [MEDIUM] CVE-2024-44135: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44135 Component: AppSandbox Impact: An app may be able to access protected files within an App Sandbox container Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43379 [MEDIUM] CVE-2025-43379: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43379 Component: AppleMobileFileIntegrity Impact: An app may be able to access protected user data Description: This issue was addressed with improved validation of symlinks.