Apple Macos Sonoma vulnerabilities

CVE-2025-31221 [HIGH] CVE-2025-31221: macOS Sonoma 14.7.6 Apple Security Update: About the security content of macOS Sonoma 14.7.6 Product: macOS Sonoma Version: 14.7.6 CVE: CVE-2025-31221 Component: Security Impact: A remote attacker may be able to leak memory Description: An integer overflow was addressed with improved input validation.

CVE-2025-43298 [HIGH] CVE-2025-43298: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43298 Component: PackageKit Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2025-24119 [HIGH] CVE-2025-24119: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-24119 Component: Finder Impact: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: This issue was addressed through improved state management.

CVE-2023-40396 [HIGH] CVE-2023-40396: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40396 Component: IOUserEthernet Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2025-46285 [HIGH] CVE-2025-46285: macOS Sonoma 14.8.3 Apple Security Update: About the security content of macOS Sonoma 14.8.3 Product: macOS Sonoma Version: 14.8.3 CVE: CVE-2025-46285 Component: Kernel Impact: An app may be able to gain root privileges Description: An integer overflow was addressed by adopting 64-bit timestamps.

CVE-2026-20615 [HIGH] CVE-2026-20615: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2026-20615 Component: CoreServices Impact: An app may be able to gain root privileges Description: A path handling issue was addressed with improved validation.

CVE-2026-20614 [HIGH] CVE-2026-20614: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2026-20614 Component: Remote Management Impact: An app may be able to gain root privileges Description: A path handling issue was addressed with improved validation.

CVE-2025-24266 [CRITICAL] CVE-2025-24266: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24266 Component: Xsan Impact: An app may be able to cause unexpected system termination Description: A buffer overflow was addressed with improved bounds checking.

CVE-2025-43198 [CRITICAL] CVE-2025-43198: macOS Sonoma 14.7.7 Apple Security Update: About the security content of macOS Sonoma 14.7.7 Product: macOS Sonoma Version: 14.7.7 CVE: CVE-2025-43198 Component: Dock Impact: An app may be able to access protected user data Description: This issue was addressed by removing the vulnerable code.

CVE-2026-20667 [HIGH] CVE-2026-20667: macOS Sonoma 14.8.4 Apple Security Update: About the security content of macOS Sonoma 14.8.4 Product: macOS Sonoma Version: 14.8.4 CVE: CVE-2026-20667 Component: CVE-2025-59375 Impact: An attacker in a privileged network position may be able to intercept network traffic Description: A logic issue was addressed with improved checks.

CVE-2024-27855 [HIGH] CVE-2024-27855: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27855 Component: Shortcuts Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: The issue was addressed with improved checks.

CVE-2024-23246 [HIGH] CVE-2024-23246: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23246 Component: UIKit Impact: An app may be able to break out of its sandbox Description: This issue was addressed by removing the vulnerable code.

CVE-2023-52356 [HIGH] CVE-2023-52356: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2023-52356 Component: CVE-2023-52356

CVE-2023-40404 [HIGH] CVE-2023-40404: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-40404 Component: Networking Impact: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management.

CVE-2024-27818 [HIGH] CVE-2024-27818: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27818 Component: Kernel Impact: An attacker may be able to cause unexpected app termination or arbitrary code execution Description: The issue was addressed with improved memory handling.

CVE-2025-9086 [HIGH] CVE-2025-9086: macOS Sonoma 14.8.3 Apple Security Update: About the security content of macOS Sonoma 14.8.3 Product: macOS Sonoma Version: 14.8.3 CVE: CVE-2025-9086 Component: CVE-2025-9086

CVE-2025-24156 [HIGH] CVE-2025-24156: macOS Sonoma 14.7.3 Apple Security Update: About the security content of macOS Sonoma 14.7.3 Product: macOS Sonoma Version: 14.7.3 CVE: CVE-2025-24156 Component: Xsan Impact: An app may be able to elevate privileges Description: An integer overflow was addressed through improved input validation.

CVE-2024-23278 [HIGH] CVE-2024-23278: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23278 Component: CVE-2024-23225 Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: This issue was addressed with improved checks.

CVE-2023-41063 [HIGH] CVE-2023-41063: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41063 Component: Pro Res Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2024-27836 [HIGH] CVE-2024-27836: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-27836 Component: ImageIO Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: The issue was addressed with improved checks.