Apple Macos Sonoma vulnerabilities

CVE-2024-27821 [MEDIUM] CVE-2024-27821: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27821 Component: Shortcuts Impact: A shortcut may output sensitive user data without consent Description: A path handling issue was addressed with improved validation.

CVE-2024-23235 [MEDIUM] CVE-2024-23235: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23235 Component: CVE-2024-23235

CVE-2025-24094 [MEDIUM] CVE-2025-24094: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24094 Component: LaunchServices Impact: An app may be able to access user-sensitive data Description: A race condition was addressed with additional validation.

CVE-2024-40776 [MEDIUM] CVE-2024-40776: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40776 Component: WebKit Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management.

CVE-2023-41981 [MEDIUM] CVE-2023-41981: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41981 Component: Kernel Impact: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations Description: The issue was addressed with improved memory handling.

CVE-2025-24179 [MEDIUM] CVE-2025-24179: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24179 Component: AirPlay Impact: An attacker on the local network may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved input validation.

CVE-2025-24106 [MEDIUM] CVE-2025-24106: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24106 Component: Audio Impact: An app may be able to cause unexpected system termination Description: This issue was addressed with additional entitlement checks.

CVE-2023-30774 [MEDIUM] CVE-2023-30774: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-30774 Component: CVE-2023-30774

CVE-2024-40846 [MEDIUM] CVE-2024-40846: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40846 Component: AppleGraphicsControl Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: The issue was addressed with improved memory handling.

CVE-2024-40854 [MEDIUM] CVE-2024-40854: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-40854 Component: GPU Drivers Impact: An app may be able to cause unexpected system termination Description: A memory initialization issue was addressed with improved memory handling.

CVE-2024-40845 [MEDIUM] CVE-2024-40845: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-40845 Component: AppleGraphicsControl Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: The issue was addressed with improved memory handling.

CVE-2025-24124 [MEDIUM] CVE-2025-24124: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24124 Component: CoreMedia Impact: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved checks.

CVE-2025-24161 [MEDIUM] CVE-2025-24161: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24161 Component: CoreAudio Impact: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved checks.

CVE-2024-44185 [MEDIUM] CVE-2024-44185: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-44185 Component: WebKit Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: The issue was addressed with improved checks.

CVE-2024-44154 [MEDIUM] CVE-2024-44154: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44154 Component: AppleGraphicsControl Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: A memory initialization issue was addressed with improved memory handling.

CVE-2025-24086 [MEDIUM] CVE-2025-24086: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24086 Component: ImageIO Impact: Processing an image may lead to a denial-of-service Description: The issue was addressed with improved memory handling.

CVE-2023-40426 [MEDIUM] CVE-2023-40426: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40426 Component: Bluetooth Impact: An app may be able to bypass certain Privacy preferences Description: A permissions issue was addressed with additional restrictions.

CVE-2024-27880 [MEDIUM] CVE-2024-27880: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-27880 Component: ImageIO Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2024-44161 [MEDIUM] CVE-2024-44161: macOS Sonoma 14.7 Apple Security Update: About the security content of macOS Sonoma 14.7 Product: macOS Sonoma Version: 14.7 CVE: CVE-2024-44161 Component: Intel Graphics Driver Impact: Processing a maliciously crafted texture may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2023-41996 [MEDIUM] CVE-2023-41996: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41996 Component: Sandbox Impact: Apps that fail verification checks may still launch Description: The issue was addressed with improved checks.