Apple Macos Sonoma vulnerabilities

CVE-2023-40430 [MEDIUM] CVE-2023-40430: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40430 Component: Sandbox Impact: An app may be able to access removable volumes without user consent Description: A logic issue was addressed with improved checks.

CVE-2025-43353 [MEDIUM] CVE-2025-43353: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43353 Component: Libinfo Impact: Processing a maliciously crafted string may lead to heap corruption Description: The issue was addressed with improved bounds checks.

CVE-2025-43398 [MEDIUM] CVE-2025-43398: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43398 Component: Kernel Impact: An app may be able to cause unexpected system termination Description: The issue was addressed with improved memory handling.

CVE-2023-38607 [MEDIUM] CVE-2023-38607: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-38607 Component: Printing Impact: An app may be able to modify Printer settings Description: The issue was addressed with improved handling of caches.

CVE-2025-43397 [MEDIUM] CVE-2025-43397: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43397 Component: SoftwareUpdate Impact: An app may be able to cause a denial-of-service Description: A permissions issue was addressed by removing the vulnerable code.

CVE-2026-20602 [MEDIUM] CVE-2026-20602: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2026-20602 Component: WindowServer Impact: An app may be able to cause a denial-of-service Description: The issue was addressed with improved handling of caches.

CVE-2025-43284 [MEDIUM] CVE-2025-43284: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43284 Component: GPU Drivers Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2025-43266 [MEDIUM] CVE-2025-43266: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43266 Component: NSSpellChecker Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43260 [MEDIUM] CVE-2025-43260: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43260 Component: PackageKit Impact: An app may be able to hijack entitlements granted to other privileged apps Description: This issue was addressed with improved data protection.

CVE-2023-41997 [MEDIUM] CVE-2023-41997: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-41997 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2023-41982 [MEDIUM] CVE-2023-41982: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-41982 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2025-24240 [MEDIUM] CVE-2025-24240: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24240 Component: StorageKit Impact: An app may be able to access user-sensitive data Description: A race condition was addressed with additional validation.

CVE-2023-41975 [MEDIUM] CVE-2023-41975: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-41975 Component: WindowServer Impact: A website may be able to access the microphone without the microphone use indicator being shown Description: This issue was addressed by removing the vulnerable code.

CVE-2025-31239 [MEDIUM] CVE-2025-31239: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31239 Component: CoreMedia Impact: Parsing a file may lead to an unexpected app termination Description: A use-after-free issue was addressed with improved memory management.

CVE-2023-38614 [MEDIUM] CVE-2023-38614: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-38614 Component: TCC Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2022-48554 [MEDIUM] CVE-2022-48554: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2022-48554 Component: CVE-2022-48554

CVE-2023-42854 [MEDIUM] CVE-2023-42854: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42854 Component: FileProvider Impact: An app may be able to cause a denial-of-service to Endpoint Security clients Description: This issue was addressed by removing the vulnerable code.

CVE-2025-24199 [MEDIUM] CVE-2025-24199: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24199 Component: Foundation Impact: An app may be able to cause a denial-of-service Description: An uncontrolled format string issue was addressed with improved input validation.

CVE-2025-24112 [MEDIUM] CVE-2025-24112: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24112 Component: AppleGraphicsControl Impact: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved checks.

CVE-2024-23201 [MEDIUM] CVE-2024-23201: macOS Sonoma 14.3 Apple Security Update: About the security content of macOS Sonoma 14.3 Product: macOS Sonoma Version: 14.3 CVE: CVE-2024-23201 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.