Apple Macos Sonoma vulnerabilities

CVE-2024-23241 [MEDIUM] CVE-2024-23241: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23241 Component: CVE-2024-23241

CVE-2025-24163 [MEDIUM] CVE-2025-24163: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24163 Component: CoreAudio Impact: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved checks.

CVE-2023-42889 [MEDIUM] CVE-2023-42889: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42889 Component: PackageKit Impact: An app may be able to bypass certain Privacy preferences Description: The issue was addressed with improved checks.

CVE-2024-40800 [MEDIUM] CVE-2024-40800: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40800 Component: Restore Framework Impact: An app may be able to modify protected parts of the file system Description: An input validation issue was addressed with improved input validation.

CVE-2023-38596 [MEDIUM] CVE-2023-38596: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-38596 Component: CFNetwork Impact: An app may fail to enforce App Transport Security Description: The issue was addressed with improved handling of protocols.

CVE-2024-40806 [MEDIUM] CVE-2024-40806: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40806 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2023-42850 [MEDIUM] CVE-2023-42850: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42850 Component: LaunchServices Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved permissions logic.

CVE-2023-40444 [MEDIUM] CVE-2023-40444: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-40444 Component: AppSandbox Impact: An app may be able to access user-sensitive data Description: A permissions issue was addressed with additional restrictions.

CVE-2024-40841 [MEDIUM] CVE-2024-40841: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40841 Component: AppleVA Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2023-41077 [MEDIUM] CVE-2023-41077: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41077 Component: Image Capture Impact: An app may be able to access protected user data Description: The issue was addressed with improved checks.

CVE-2023-42894 [MEDIUM] CVE-2023-42894: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42894 Component: AppleEvents Impact: An app may be able to access information about a user's contacts Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-40402 [MEDIUM] CVE-2023-40402: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40402 Component: Bluetooth Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2023-41078 [MEDIUM] CVE-2023-41078: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41078 Component: Screen Sharing Impact: An app may be able to bypass certain Privacy preferences Description: An authorization issue was addressed with improved state management.

CVE-2024-40824 [MEDIUM] CVE-2024-40824: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40824 Component: Sandbox Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed through improved state management.

CVE-2023-32421 [MEDIUM] CVE-2023-32421: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-32421 Component: Messages Impact: An app may be able to observe unprotected user data Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2025-30455 [MEDIUM] CVE-2025-30455: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30455 Component: Dock Impact: A malicious app may be able to access private information Description: The issue was addressed with improved checks.

CVE-2025-24261 [MEDIUM] CVE-2025-24261: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24261 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks.

CVE-2024-23279 [MEDIUM] CVE-2024-23279: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23279 Component: MediaRemote Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-24122 [MEDIUM] CVE-2025-24122: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24122 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2023-40528 [MEDIUM] CVE-2023-40528: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40528 Component: Core Data Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed by removing the vulnerable code.