Apple Macos Sonoma vulnerabilities

CVE-2024-40841 [MEDIUM] CVE-2024-40841: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40841 Component: AppleVA Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2023-42894 [MEDIUM] CVE-2023-42894: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42894 Component: AppleEvents Impact: An app may be able to access information about a user's contacts Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-42850 [MEDIUM] CVE-2023-42850: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42850 Component: LaunchServices Impact: An app may be able to access sensitive user data Description: The issue was addressed with improved permissions logic.

CVE-2023-40444 [MEDIUM] CVE-2023-40444: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-40444 Component: AppSandbox Impact: An app may be able to access user-sensitive data Description: A permissions issue was addressed with additional restrictions.

CVE-2023-41077 [MEDIUM] CVE-2023-41077: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41077 Component: Image Capture Impact: An app may be able to access protected user data Description: The issue was addressed with improved checks.

CVE-2023-40402 [MEDIUM] CVE-2023-40402: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40402 Component: Bluetooth Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2023-41078 [MEDIUM] CVE-2023-41078: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41078 Component: Screen Sharing Impact: An app may be able to bypass certain Privacy preferences Description: An authorization issue was addressed with improved state management.

CVE-2024-40816 [MEDIUM] CVE-2024-40816: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40816 Component: Kernel Impact: A local attacker may be able to cause unexpected system shutdown Description: An out-of-bounds read was addressed with improved input validation.

CVE-2024-40804 [MEDIUM] CVE-2024-40804: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40804 Component: Accounts Impact: A malicious application may be able to access private information Description: The issue was addressed with improved checks.

CVE-2023-32421 [MEDIUM] CVE-2023-32421: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-32421 Component: Messages Impact: An app may be able to observe unprotected user data Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2025-43302 [MEDIUM] CVE-2025-43302: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43302 Component: IOHIDFamily Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2025-24122 [MEDIUM] CVE-2025-24122: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24122 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2025-30455 [MEDIUM] CVE-2025-30455: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-30455 Component: Dock Impact: A malicious app may be able to access private information Description: The issue was addressed with improved checks.

CVE-2025-24261 [MEDIUM] CVE-2025-24261: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24261 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks.

CVE-2024-23282 [MEDIUM] CVE-2024-23282: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-23282 Component: Mail Impact: A maliciously crafted email may be able to initiate FaceTime calls without user authorization Description: The issue was addressed with improved checks.

CVE-2024-44280 [MEDIUM] CVE-2024-44280: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44280 Component: AppleMobileFileIntegrity Impact: An app may be able to modify protected parts of the file system Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVE-2024-23250 [MEDIUM] CVE-2024-23250: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23250 Component: CoreBluetooth - LE Impact: An app may be able to access Bluetooth-connected microphones without user permission Description: An access issue was addressed with improved access restrictions.

CVE-2024-44295 [MEDIUM] CVE-2024-44295: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44295 Component: CoreServicesUIAgent Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with additional entitlement checks.

CVE-2024-44125 [MEDIUM] CVE-2024-44125: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44125 Component: Sandbox Impact: A malicious application may be able to leak sensitive user information Description: The issue was addressed with improved checks.

CVE-2024-44163 [MEDIUM] CVE-2024-44163: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44163 Component: Sandbox Impact: A malicious application may be able to access private information Description: The issue was addressed with improved checks.