Apple Macos Sonoma vulnerabilities
960 known vulnerabilities affecting apple/macos_sonoma.
Total CVEs
960
CISA KEV
11
actively exploited
Public exploits
8
Exploited in wild
19
Severity breakdown
CRITICAL73HIGH290MEDIUM533LOW63UNKNOWN1
Vulnerabilities
Page 35 of 48
CVE-2023-42834P4MEDIUMCVSS 5.5v14.12023-10-25
CVE-2023-42834 [MEDIUM] CVE-2023-42834: macOS Sonoma 14.1
Apple Security Update: About the security content of macOS Sonoma 14.1
Product: macOS Sonoma
Version: 14.1
CVE: CVE-2023-42834
Component: Find My
Impact: An app may be able to access sensitive user data
Description: A privacy issue was addressed with improved handling of files.
apple
CVE-2024-40811P4MEDIUMCVSS 5.5v14.62024-07-29
CVE-2024-40811 [MEDIUM] CVE-2024-40811: macOS Sonoma 14.6
Apple Security Update: About the security content of macOS Sonoma 14.6
Product: macOS Sonoma
Version: 14.6
CVE: CVE-2024-40811
Component: StorageKit
Impact: A malicious app may be able to gain root privileges
Description: The issue was addressed with improved checks.
apple
CVE-2023-42936P4MEDIUMCVSS 5.5v14.22023-12-11
CVE-2023-42936 [MEDIUM] CVE-2023-42936: macOS Sonoma 14.2
Apple Security Update: About the security content of macOS Sonoma 14.2
Product: macOS Sonoma
Version: 14.2
CVE: CVE-2023-42936
Component: Sandbox
Impact: An app may be able to access user-sensitive data
Description: This issue was addressed with improved redaction of sensitive information.
apple
CVE-2025-24197P4MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-24197 [MEDIUM] CVE-2025-24197: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-24197
Component: Spotlight
Impact: An app may be able to access sensitive user data
Description: A logic issue was addressed with improved checks.
apple
CVE-2025-31268P4MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-31268 [MEDIUM] CVE-2025-31268: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-31268
Impact: An app may be able to access protected user data
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2023-42853P4MEDIUMCVSS 5.5v14.12023-10-25
CVE-2023-42853 [MEDIUM] CVE-2023-42853: macOS Sonoma 14.1
Apple Security Update: About the security content of macOS Sonoma 14.1
Product: macOS Sonoma
Version: 14.1
CVE: CVE-2023-42853
Component: PackageKit
Impact: An app may be able to access user-sensitive data
Description: A logic issue was addressed with improved checks.
apple
CVE-2023-40411P4MEDIUMCVSS 5.5v142023-09-26
CVE-2023-40411 [MEDIUM] CVE-2023-40411: macOS Sonoma 14
Apple Security Update: About the security content of macOS Sonoma 14
Product: macOS Sonoma
Version: 14
CVE: CVE-2023-40411
Component: FileProvider
Impact: An app may be able to access user-sensitive data
Description: This issue was addressed with improved data protection.
apple
CVE-2024-23230P4MEDIUMCVSS 5.5v14.42024-03-07
CVE-2024-23230 [MEDIUM] CVE-2024-23230: macOS Sonoma 14.4
Apple Security Update: About the security content of macOS Sonoma 14.4
Product: macOS Sonoma
Version: 14.4
CVE: CVE-2024-23230
Component: SharedFileList
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved file handling.
apple
CVE-2025-43391P4MEDIUMCVSS 5.5v14.8.22025-11-03
CVE-2025-43391 [MEDIUM] CVE-2025-43391: macOS Sonoma 14.8.2
Apple Security Update: About the security content of macOS Sonoma 14.8.2
Product: macOS Sonoma
Version: 14.8.2
CVE: CVE-2025-43391
Component: Photos
Impact: An app may be able to access sensitive user data
Description: A privacy issue was addressed with improved handling of temporary files.
apple
CVE-2025-43225P4MEDIUMCVSS 5.5v14.7.72025-07-29
CVE-2025-43225 [MEDIUM] CVE-2025-43225: macOS Sonoma 14.7.7
Apple Security Update: About the security content of macOS Sonoma 14.7.7
Product: macOS Sonoma
Version: 14.7.7
CVE: CVE-2025-43225
Component: Notes
Impact: An app may be able to access sensitive user data
Description: A logging issue was addressed with improved data redaction.
apple
CVE-2025-43195P4MEDIUMCVSS 5.5v14.7.72025-07-29
CVE-2025-43195 [MEDIUM] CVE-2025-43195: macOS Sonoma 14.7.7
Apple Security Update: About the security content of macOS Sonoma 14.7.7
Product: macOS Sonoma
Version: 14.7.7
CVE: CVE-2025-43195
Component: CoreServices
Impact: An app may be able to access sensitive user data
Description: An issue existed in the handling of environment variables. This issue was addressed with improved validation.
apple
CVE-2025-43246P4MEDIUMCVSS 5.5v14.7.72025-07-29
CVE-2025-43246 [MEDIUM] CVE-2025-43246: macOS Sonoma 14.7.7
Apple Security Update: About the security content of macOS Sonoma 14.7.7
Product: macOS Sonoma
Version: 14.7.7
CVE: CVE-2025-43246
Component: Spotlight
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved checks.
apple
CVE-2023-42896P4MEDIUMCVSS 5.5v14.22023-12-11
CVE-2023-42896 [MEDIUM] CVE-2023-42896: macOS Sonoma 14.2
Apple Security Update: About the security content of macOS Sonoma 14.2
Product: macOS Sonoma
Version: 14.2
CVE: CVE-2023-42896
Component: Assets
Impact: An app may be able to modify protected parts of the file system
Description: An issue was addressed with improved handling of temporary files.
apple
CVE-2025-43380P4MEDIUMCVSS 5.5v14.8.22025-11-03
CVE-2025-43380 [MEDIUM] CVE-2025-43380: macOS Sonoma 14.8.2
Apple Security Update: About the security content of macOS Sonoma 14.8.2
Product: macOS Sonoma
Version: 14.8.2
CVE: CVE-2025-43380
Component: Shortcuts
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement checks.
apple
CVE-2025-43498P4MEDIUMCVSS 5.5v14.8.22025-11-03
CVE-2025-43498 [MEDIUM] CVE-2025-43498: macOS Sonoma 14.8.2
Apple Security Update: About the security content of macOS Sonoma 14.8.2
Product: macOS Sonoma
Version: 14.8.2
CVE: CVE-2025-43498
Component: FileProvider
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
apple
CVE-2023-40390P4MEDIUMCVSS 5.5v14.22023-12-11
CVE-2023-40390 [MEDIUM] CVE-2023-40390: macOS Sonoma 14.2
Apple Security Update: About the security content of macOS Sonoma 14.2
Product: macOS Sonoma
Version: 14.2
CVE: CVE-2023-40390
Component: Share Sheet
Impact: An app may be able to access user-sensitive data
Description: A privacy issue was addressed by moving sensitive data to a protected location.
apple
CVE-2023-42858P4MEDIUMCVSS 5.5v14.12023-10-25
CVE-2023-42858 [MEDIUM] CVE-2023-42858: macOS Sonoma 14.1
Apple Security Update: About the security content of macOS Sonoma 14.1
Product: macOS Sonoma
Version: 14.1
CVE: CVE-2023-42858
Component: WindowServer
Impact: An app may be able to access user-sensitive data
Description: The issue was addressed with improved checks.
apple
CVE-2025-43499P4MEDIUMCVSS 5.5v14.8.22025-11-03
CVE-2025-43499 [MEDIUM] CVE-2025-43499: macOS Sonoma 14.8.2
Apple Security Update: About the security content of macOS Sonoma 14.8.2
Product: macOS Sonoma
Version: 14.8.2
CVE: CVE-2025-43499
Component: Shortcuts
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement checks.
apple
CVE-2023-42943P4MEDIUMCVSS 5.5v142023-09-26
CVE-2023-42943 [MEDIUM] CVE-2023-42943: macOS Sonoma 14
Apple Security Update: About the security content of macOS Sonoma 14
Product: macOS Sonoma
Version: 14
CVE: CVE-2023-42943
Component: Clock
Impact: An app may be able to read sensitive location information
Description: A privacy issue was addressed with improved private data redaction for log entries.
apple
CVE-2024-27888P4MEDIUMCVSS 5.5v14.42024-03-07
CVE-2024-27888 [MEDIUM] CVE-2024-27888: macOS Sonoma 14.4
Apple Security Update: About the security content of macOS Sonoma 14.4
Product: macOS Sonoma
Version: 14.4
CVE: CVE-2024-27888
Component: PackageKit
Impact: An app may be able to modify protected parts of the file system
Description: A permissions issue was addressed by removing vulnerable code and adding additional checks.
apple