Apple Macos Sonoma vulnerabilities

CVE-2024-40816 [MEDIUM] CVE-2024-40816: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40816 Component: Kernel Impact: A local attacker may be able to cause unexpected system shutdown Description: An out-of-bounds read was addressed with improved input validation.

CVE-2024-40804 [MEDIUM] CVE-2024-40804: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40804 Component: Accounts Impact: A malicious application may be able to access private information Description: The issue was addressed with improved checks.

CVE-2024-23285 [MEDIUM] CVE-2024-23285: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23285 Component: Music Impact: An app may be able to create symlinks to protected regions of the disk Description: This issue was addressed with improved handling of symlinks.

CVE-2025-24111 [MEDIUM] CVE-2025-24111: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24111 Component: Display Impact: An app may be able to cause unexpected system termination Description: A memory corruption issue was addressed with improved state management.

CVE-2023-40450 [MEDIUM] CVE-2023-40450: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40450 Component: System Preferences Impact: An app may bypass Gatekeeper checks Description: The issue was addressed with improved checks.

CVE-2024-23250 [MEDIUM] CVE-2024-23250: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23250 Component: CoreBluetooth - LE Impact: An app may be able to access Bluetooth-connected microphones without user permission Description: An access issue was addressed with improved access restrictions.

CVE-2025-31245 [MEDIUM] CVE-2025-31245: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31245 Component: Pro Res Impact: An app may be able to cause unexpected system termination Description: The issue was addressed with improved checks.

CVE-2023-41994 [MEDIUM] CVE-2023-41994: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41994 Component: CoreMedia Impact: A camera extension may be able to access the camera view from apps other than the app for which it was granted permission Description: A logic issue was addressed with improved checks

CVE-2025-43478 [MEDIUM] CVE-2025-43478: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43478 Component: ASP TCP Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management.

CVE-2024-40810 [MEDIUM] CVE-2024-40810: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40810 Component: IOMobileFrameBuffer Impact: An app may be able to cause a coprocessor crash Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2025-43282 [MEDIUM] CVE-2025-43282: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43282 Component: Kernel Impact: An app may be able to cause unexpected system termination Description: A double free issue was addressed with improved memory management.

CVE-2026-20621 [MEDIUM] CVE-2026-20621: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2026-20621 Component: Wi-Fi Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling.

CVE-2025-43311 [MEDIUM] CVE-2025-43311: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43311 Component: Touch Bar Impact: An app may be able to access protected user data Description: This issue was addressed with additional entitlement checks.

CVE-2025-24099 [MEDIUM] CVE-2025-24099: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24099 Component: PackageKit Impact: A local attacker may be able to elevate their privileges Description: The issue was addressed with improved checks.

CVE-2024-27821 [MEDIUM] CVE-2024-27821: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27821 Component: Shortcuts Impact: A shortcut may output sensitive user data without consent Description: A path handling issue was addressed with improved validation.

CVE-2024-23235 [MEDIUM] CVE-2024-23235: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23235 Component: CVE-2024-23235

CVE-2025-24160 [MEDIUM] CVE-2025-24160: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24160 Component: CoreAudio Impact: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved checks.

CVE-2025-24094 [MEDIUM] CVE-2025-24094: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24094 Component: LaunchServices Impact: An app may be able to access user-sensitive data Description: A race condition was addressed with additional validation.

CVE-2025-43420 [MEDIUM] CVE-2025-43420: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43420 Component: Dock Impact: An app may be able to access sensitive user data Description: A race condition was addressed with improved state handling.

CVE-2025-43445 [MEDIUM] CVE-2025-43445: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43445 Component: CoreText Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds read was addressed with improved input validation.