Apple Macos Sonoma vulnerabilities
959 known vulnerabilities affecting apple/macos_sonoma.
Total CVEs
959
CISA KEV
11
actively exploited
Public exploits
3
Exploited in wild
6
Severity breakdown
CRITICAL73HIGH289MEDIUM533LOW63UNKNOWN1
Vulnerabilities
Page 7 of 48
CVE-2025-43286HIGHCVSS 7.8v14.82025-09-15
CVE-2025-43286 [HIGH] CVE-2025-43286: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43286
Component: SharedFileList
Impact: An app may be able to break out of its sandbox
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2025-43298HIGHCVSS 7.8v14.82025-09-15
CVE-2025-43298 [HIGH] CVE-2025-43298: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43298
Component: PackageKit
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
apple
CVE-2025-31259HIGHCVSS 7.8v14.82025-09-15
CVE-2025-31259 [HIGH] CVE-2025-31259: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-31259
Component: Screenshots
Impact: An app may be able to capture a screenshot of an app entering or exiting full screen mode
Description: A privacy issue was addressed with improved checks.
apple
CVE-2025-43277HIGHCVSS 7.8v14.82025-09-15
CVE-2025-43277 [HIGH] CVE-2025-43277: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43277
Component: CoreAudio
Impact: Processing a maliciously crafted audio file may lead to memory corruption
Description: The issue was addressed with improved memory handling.
apple
CVE-2025-43341HIGHCVSS 7.8v14.82025-09-15
CVE-2025-43341 [HIGH] CVE-2025-43341: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43341
Component: Storage
Impact: An app may be able to gain root privileges
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2025-43304HIGHCVSS 7.0v14.82025-09-15
CVE-2025-43304 [HIGH] CVE-2025-43304: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43304
Component: StorageKit
Impact: An app may be able to gain root privileges
Description: A race condition was addressed with improved state handling.
apple
CVE-2025-43353MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43353 [MEDIUM] CVE-2025-43353: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43353
Component: Libinfo
Impact: Processing a maliciously crafted string may lead to heap corruption
Description: The issue was addressed with improved bounds checks.
apple
CVE-2025-43231MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43231 [MEDIUM] CVE-2025-43231: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43231
Component: LaunchServices
Impact: An app may be able to access user-sensitive data
Description: A logic issue was addressed with improved checks.
apple
CVE-2025-43319MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43319 [MEDIUM] CVE-2025-43319: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43319
Component: MediaLibrary
Impact: An app may be able to access protected user data
Description: This issue was addressed by removing the vulnerable code.
apple
CVE-2025-43314MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43314 [MEDIUM] CVE-2025-43314: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43314
Component: StorageKit
Impact: An app may be able to access sensitive user data
Description: A parsing issue in the handling of directory paths was addressed with improved path validation.
apple
CVE-2025-31269MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-31269 [MEDIUM] CVE-2025-31269: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-31269
Component: Printing
Impact: An app may be able to access protected user data
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2025-43295MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43295 [MEDIUM] CVE-2025-43295: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43295
Component: LaunchServices
Impact: An app may be able to access user-sensitive data
Description: A logic issue was addressed with improved checks.
apple
CVE-2025-43305MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43305 [MEDIUM] CVE-2025-43305: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43305
Component: CoreServices
Impact: A malicious app may be able to access private information
Description: A logic issue was addressed with improved checks.
apple
CVE-2025-43326MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43326 [MEDIUM] CVE-2025-43326: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43326
Component: GPU Drivers
Impact: An app may be able to access sensitive user data
Description: An out-of-bounds read was addressed with improved bounds checking.
apple
CVE-2025-24197MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-24197 [MEDIUM] CVE-2025-24197: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-24197
Component: Spotlight
Impact: An app may be able to access sensitive user data
Description: A logic issue was addressed with improved checks.
apple
CVE-2025-40909MEDIUMCVSS 5.9v14.82025-09-15
CVE-2025-40909 [MEDIUM] CVE-2025-40909: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-40909
Component: CVE-2025-40909
apple
CVE-2025-43285MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43285 [MEDIUM] CVE-2025-43285: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43285
Component: AppSandbox
Impact: An app may be able to access protected user data
Description: A permissions issue was addressed with additional restrictions.
apple
CVE-2025-43291MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43291 [MEDIUM] CVE-2025-43291: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43291
Component: SharedFileList
Impact: An app may be able to modify protected parts of the file system
Description: A permissions issue was addressed by removing the vulnerable code.
apple
CVE-2025-43310MEDIUMCVSS 4.4v14.82025-09-15
CVE-2025-43310 [MEDIUM] CVE-2025-43310: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43310
Component: WindowServer
Impact: An app may be able to trick a user into copying sensitive data to the pasteboard
Description: A configuration issue was addressed with additional restrictions.
apple
CVE-2025-43312MEDIUMCVSS 5.5v14.82025-09-15
CVE-2025-43312 [MEDIUM] CVE-2025-43312: macOS Sonoma 14.8
Apple Security Update: About the security content of macOS Sonoma 14.8
Product: macOS Sonoma
Version: 14.8
CVE: CVE-2025-43312
Component: AMD
Impact: An app may be able to cause unexpected system termination
Description: A buffer overflow was addressed with improved bounds checking.
apple