Apple Macos Sonoma vulnerabilities

CVE-2023-42914 [MEDIUM] CVE-2023-42914: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42914 Component: Kernel Impact: An app may be able to break out of its sandbox Description: The issue was addressed with improved memory handling.

CVE-2023-42884 [MEDIUM] CVE-2023-42884: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42884 Component: AVEVideoEncoder Impact: An app may be able to disclose kernel memory Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-42930 [MEDIUM] CVE-2023-42930: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42930 Component: Shell Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved checks.

CVE-2023-45866 [MEDIUM] CVE-2023-45866: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-45866 Component: Bluetooth Impact: An attacker in a privileged network position may be able to inject keystrokes by spoofing a keyboard Description: The issue was addressed with improved checks.

CVE-2020-19185 [MEDIUM] CVE-2020-19185: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19185 Component: CVE-2020-19185

CVE-2020-19190 [MEDIUM] CVE-2020-19190: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19190 Component: CVE-2020-19190

CVE-2023-42898 [MEDIUM] CVE-2023-42898: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42898 Component: ImageIO Impact: Processing an image may lead to arbitrary code execution Description: The issue was addressed with improved memory handling.

CVE-2023-42894 [MEDIUM] CVE-2023-42894: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42894 Component: AppleEvents Impact: An app may be able to access information about a user's contacts Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-42883 [MEDIUM] CVE-2023-42883: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42883 Component: WebKit Impact: Processing an image may lead to a denial-of-service Description: The issue was addressed with improved memory handling.

CVE-2023-42919 [MEDIUM] CVE-2023-42919: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42919 Component: Accounts Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42924 [MEDIUM] CVE-2023-42924: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42924 Component: Archive Utility Impact: An app may be able to access sensitive user data Description: A logic issue was addressed with improved checks.

CVE-2020-19189 [MEDIUM] CVE-2020-19189: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19189 Component: CVE-2020-19189

CVE-2023-42932 [MEDIUM] CVE-2023-42932: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42932 Component: TCC Impact: An app may be able to access protected user data Description: A logic issue was addressed with improved checks.

CVE-2020-19188 [MEDIUM] CVE-2020-19188: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19188 Component: CVE-2020-19188

CVE-2023-42937 [MEDIUM] CVE-2023-42937: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42937 Component: Accessibility Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42887 [MEDIUM] CVE-2023-42887: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42887 Component: NSOpenPanel Impact: An app may be able to read arbitrary files Description: An access issue was addressed with additional sandbox restrictions.

CVE-2020-19187 [MEDIUM] CVE-2020-19187: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2020-19187 Component: CVE-2020-19187

CVE-2023-38546 [LOW] CVE-2023-38546: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-38546 Component: CVE-2023-38546

CVE-2023-42874 [LOW] CVE-2023-42874: macOS Sonoma 14.2 Apple Security Update: About the security content of macOS Sonoma 14.2 Product: macOS Sonoma Version: 14.2 CVE: CVE-2023-42874 Component: Accessibility Impact: Secure text fields may be displayed via the Accessibility Keyboard when using a physical keyboard Description: This issue was addressed with improved state management.

CVE-2023-42917 [HIGH] CVE-2023-42917: macOS Sonoma 14.1.2 Apple Security Update: About the security content of macOS Sonoma 14.1.2 Product: macOS Sonoma Version: 14.1.2 CVE: CVE-2023-42917 Component: WebKit Impact: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1. Description: A memory corruption vulnerability was addressed with improved locking.