Apple Macos Sonoma vulnerabilities
960 known vulnerabilities affecting apple/macos_sonoma.
Total CVEs
960
CISA KEV
11
actively exploited
Public exploits
8
Exploited in wild
19
Severity breakdown
CRITICAL73HIGH290MEDIUM533LOW63UNKNOWN1
Vulnerabilities
Page 6 of 48
CVE-2023-41984P3HIGHCVSS 7.8v142023-09-26
CVE-2023-41984 [HIGH] CVE-2023-41984: macOS Sonoma 14
Apple Security Update: About the security content of macOS Sonoma 14
Product: macOS Sonoma
Version: 14
CVE: CVE-2023-41984
Component: Kernel
Impact: An app may be able to execute arbitrary code with kernel privileges
Description: The issue was addressed with improved memory handling.
apple
CVE-2025-31183P3CRITICALCVSS 9.8v14.7.52025-03-31
CVE-2025-31183 [CRITICAL] CVE-2025-31183: macOS Sonoma 14.7.5
Apple Security Update: About the security content of macOS Sonoma 14.7.5
Product: macOS Sonoma
Version: 14.7.5
CVE: CVE-2025-31183
Component: Siri
Impact: An app may be able to access sensitive user data
Description: The issue was addressed with improved restriction of data container access.
apple
CVE-2024-40771P3HIGHCVSS 7.8v14.52024-05-13
CVE-2024-40771 [HIGH] CVE-2024-40771: macOS Sonoma 14.5
Apple Security Update: About the security content of macOS Sonoma 14.5
Product: macOS Sonoma
Version: 14.5
CVE: CVE-2024-40771
Component: AVEVideoEncoder
Impact: An app may be able to execute arbitrary code with kernel privileges
Description: The issue was addressed with improved memory handling.
apple
CVE-2025-24206P3HIGHCVSS 7.7v14.7.52025-03-31
CVE-2025-24206 [HIGH] CVE-2025-24206: macOS Sonoma 14.7.5
Apple Security Update: About the security content of macOS Sonoma 14.7.5
Product: macOS Sonoma
Version: 14.7.5
CVE: CVE-2025-24206
Component: AirPlay
Impact: An attacker on the local network may be able to bypass authentication policy
Description: An authentication issue was addressed with improved state management.
apple
CVE-2025-24273P3CRITICALCVSS 9.8v14.7.52025-03-31
CVE-2025-24273 [CRITICAL] CVE-2025-24273: macOS Sonoma 14.7.5
Apple Security Update: About the security content of macOS Sonoma 14.7.5
Product: macOS Sonoma
Version: 14.7.5
CVE: CVE-2025-24273
Component: GPU Drivers
Impact: An app may be able to cause unexpected system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
apple
CVE-2025-30444P3CRITICALCVSS 9.8v14.7.52025-03-31
CVE-2025-30444 [CRITICAL] CVE-2025-30444: macOS Sonoma 14.7.5
Apple Security Update: About the security content of macOS Sonoma 14.7.5
Product: macOS Sonoma
Version: 14.7.5
CVE: CVE-2025-30444
Component: SMB
Impact: Mounting a maliciously crafted SMB network share may lead to system termination
Description: A race condition was addressed with improved locking.
apple
CVE-2025-43199P3CRITICALCVSS 9.8v14.7.72025-07-29
CVE-2025-43199 [CRITICAL] CVE-2025-43199: macOS Sonoma 14.7.7
Apple Security Update: About the security content of macOS Sonoma 14.7.7
Product: macOS Sonoma
Version: 14.7.7
CVE: CVE-2025-43199
Component: CoreServices
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed by removing the vulnerable code.
apple
CVE-2025-43245P3CRITICALCVSS 9.8v14.7.72025-07-29
CVE-2025-43245 [CRITICAL] CVE-2025-43245: macOS Sonoma 14.7.7
Apple Security Update: About the security content of macOS Sonoma 14.7.7
Product: macOS Sonoma
Version: 14.7.7
CVE: CVE-2025-43245
Component: AppleMobileFileIntegrity
Impact: An app may be able to access protected user data
Description: A downgrade issue was addressed with additional code-signing restrictions.
apple
CVE-2024-44206P3CRITICALCVSS 9.3v14.62024-07-29
CVE-2024-44206 [CRITICAL] CVE-2024-44206: macOS Sonoma 14.6
Apple Security Update: About the security content of macOS Sonoma 14.6
Product: macOS Sonoma
Version: 14.6
CVE: CVE-2024-44206
Component: WebKit
Impact: A user may be able to bypass some web content restrictions
Description: An issue in the handling of URL protocols was addressed with improved logic.
apple
CVE-2025-43400P3MEDIUMCVSS 6.3v14.8.12025-09-29
CVE-2025-43400 [MEDIUM] CVE-2025-43400: macOS Sonoma 14.8.1
Apple Security Update: About the security content of macOS Sonoma 14.8.1
Product: macOS Sonoma
Version: 14.8.1
CVE: CVE-2025-43400
Component: FontParser
Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
apple
CVE-2024-44122P3HIGHCVSS 8.8v14.7.12024-10-28
CVE-2024-44122 [HIGH] CVE-2024-44122: macOS Sonoma 14.7.1
Apple Security Update: About the security content of macOS Sonoma 14.7.1
Product: macOS Sonoma
Version: 14.7.1
CVE: CVE-2024-44122
Component: LaunchServices
Impact: An application may be able to break out of its sandbox
Description: A logic issue was addressed with improved checks.
apple
CVE-2023-42838P3HIGHCVSS 8.6v14.12023-10-25
CVE-2023-42838 [HIGH] CVE-2023-42838: macOS Sonoma 14.1
Apple Security Update: About the security content of macOS Sonoma 14.1
Product: macOS Sonoma
Version: 14.1
CVE: CVE-2023-42838
Component: Pro Res
Impact: An app may be able to execute arbitrary code with kernel privileges
Description: The issue was addressed with improved bounds checks.
apple
CVE-2024-23208P3HIGHCVSS 7.8v14.32024-01-22
CVE-2024-23208 [HIGH] CVE-2024-23208: macOS Sonoma 14.3
Apple Security Update: About the security content of macOS Sonoma 14.3
Product: macOS Sonoma
Version: 14.3
CVE: CVE-2024-23208
Component: Kernel
Impact: An app may be able to execute arbitrary code with kernel privileges
Description: The issue was addressed with improved memory handling.
apple
CVE-2023-42931P3HIGHCVSS 7.8v14.22023-12-11
CVE-2023-42931 [HIGH] CVE-2023-42931: macOS Sonoma 14.2
Apple Security Update: About the security content of macOS Sonoma 14.2
Product: macOS Sonoma
Version: 14.2
CVE: CVE-2023-42931
Component: DiskArbitration
Impact: A process may gain admin privileges without proper authentication
Description: The issue was addressed with improved checks.
apple
CVE-2025-24238P3HIGHCVSS 7.8v14.7.52025-03-31
CVE-2025-24238 [HIGH] CVE-2025-24238: macOS Sonoma 14.7.5
Apple Security Update: About the security content of macOS Sonoma 14.7.5
Product: macOS Sonoma
Version: 14.7.5
CVE: CVE-2025-24238
Component: CVE-2024-56171
Impact: An app may be able to break out of its sandbox
Description: This issue was addressed through improved state management.
apple
CVE-2024-27856P3HIGHCVSS 7.8v14.52024-05-13
CVE-2024-27856 [HIGH] CVE-2024-27856: macOS Sonoma 14.5
Apple Security Update: About the security content of macOS Sonoma 14.5
Product: macOS Sonoma
Version: 14.5
CVE: CVE-2024-27856
Component: WebKit
Impact: Processing a file may lead to unexpected app termination or arbitrary code execution
Description: The issue was addressed with improved checks.
apple
CVE-2024-8176P3HIGHCVSS 7.5v14.7.62025-05-12
CVE-2024-8176 [HIGH] CVE-2024-8176: macOS Sonoma 14.7.6
Apple Security Update: About the security content of macOS Sonoma 14.7.6
Product: macOS Sonoma
Version: 14.7.6
CVE: CVE-2024-8176
Component: CVE-2024-8176
apple
CVE-2023-42899P3HIGHCVSS 7.8v14.22023-12-11
CVE-2023-42899 [HIGH] CVE-2023-42899: macOS Sonoma 14.2
Apple Security Update: About the security content of macOS Sonoma 14.2
Product: macOS Sonoma
Version: 14.2
CVE: CVE-2023-42899
Component: ImageIO
Impact: Processing an image may lead to arbitrary code execution
Description: The issue was addressed with improved memory handling.
apple
CVE-2024-27802P3HIGHCVSS 7.8v14.52024-05-13
CVE-2024-27802 [HIGH] CVE-2024-27802: macOS Sonoma 14.5
Apple Security Update: About the security content of macOS Sonoma 14.5
Product: macOS Sonoma
Version: 14.5
CVE: CVE-2024-27802
Component: Metal
Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Description: An out-of-bounds read was addressed with improved input validation.
apple
CVE-2023-40423P3HIGHCVSS 7.8v14.12023-10-25
CVE-2023-40423 [HIGH] CVE-2023-40423: macOS Sonoma 14.1
Apple Security Update: About the security content of macOS Sonoma 14.1
Product: macOS Sonoma
Version: 14.1
CVE: CVE-2023-40423
Component: IOTextEncryptionFamily
Impact: An app may be able to execute arbitrary code with kernel privileges
Description: The issue was addressed with improved memory handling.
apple