Apple Macos Sonoma vulnerabilities

CVE-2025-24276 [MEDIUM] CVE-2025-24276: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24276 Component: App Store Impact: A malicious app may be able to access private information Description: This issue was addressed by removing the vulnerable code.

CVE-2025-24092 [MEDIUM] CVE-2025-24092: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24092 Component: TV App Impact: An app may be able to read sensitive location information Description: This issue was addressed with improved data protection.

CVE-2024-27872 [MEDIUM] CVE-2024-27872: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-27872 Component: Security Initialization Impact: An app may be able to access protected user data Description: This issue was addressed with improved validation of symlinks.

CVE-2025-43394 [MEDIUM] CVE-2025-43394: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43394 Component: Audio Impact: A malicious app may be able to read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2025-24138 [MEDIUM] CVE-2025-24138: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24138 Component: Spotlight Impact: A malicious application may be able to leak sensitive user information Description: This issue was addressed through improved state management.

CVE-2024-44168 [MEDIUM] CVE-2024-44168: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44168 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: A library injection issue was addressed with additional restrictions.

CVE-2024-23269 [MEDIUM] CVE-2024-23269: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23269 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2025-43348 [MEDIUM] CVE-2025-43348: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43348 Component: Finder Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved validation.

CVE-2024-44158 [MEDIUM] CVE-2024-44158: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44158 Component: Shortcuts Impact: A shortcut may output sensitive user data without consent Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-44257 [MEDIUM] CVE-2024-44257: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44257 Component: WindowServer Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-44216 [MEDIUM] CVE-2024-44216: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44216 Component: Installer Impact: An app may be able to access user-sensitive data Description: An access issue was addressed with additional sandbox restrictions.

CVE-2023-42840 [MEDIUM] CVE-2023-42840: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42840 Component: PackageKit Impact: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks.

CVE-2024-44128 [MEDIUM] CVE-2024-44128: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44128 Component: Automator Impact: An Automator Quick Action workflow may be able to bypass Gatekeeper Description: This issue was addressed by adding an additional prompt for user consent.

CVE-2025-43231 [MEDIUM] CVE-2025-43231: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43231 Component: LaunchServices Impact: An app may be able to access user-sensitive data Description: A logic issue was addressed with improved checks.

CVE-2025-43326 [MEDIUM] CVE-2025-43326: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43326 Component: GPU Drivers Impact: An app may be able to access sensitive user data Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2025-43305 [MEDIUM] CVE-2025-43305: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43305 Component: CoreServices Impact: A malicious app may be able to access private information Description: A logic issue was addressed with improved checks.

CVE-2025-24114 [MEDIUM] CVE-2025-24114: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24114 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.

CVE-2025-24142 [MEDIUM] CVE-2025-24142: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-24142 Component: Notification Center Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-43291 [MEDIUM] CVE-2025-43291: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43291 Component: SharedFileList Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed by removing the vulnerable code.

CVE-2023-40389 [MEDIUM] CVE-2023-40389: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-40389 Component: Transparency Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved restriction of data container access.