Apple Macos Ventura vulnerabilities

CVE-2025-43300 [CRITICAL] CVE-2025-43300: macOS Ventura 13.7.8 Apple Security Update: About the security content of macOS Ventura 13.7.8 Product: macOS Ventura Version: 13.7.8 CVE: CVE-2025-43300 Component: ImageIO Impact: Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. Description: An out-of-bounds write issue was addressed with improv

CVE-2025-24085 [CRITICAL] CVE-2025-24085: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24085 Component: CVE-2025-24085

CVE-2023-32434 [HIGH] CVE-2023-32434: macOS Ventura 13.4.1 Apple Security Update: About the security content of macOS Ventura 13.4.1 Product: macOS Ventura Version: 13.4.1 CVE: CVE-2023-32434 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Description: An integer overflow was addressed with improved input validation.

CVE-2023-28205 [HIGH] CVE-2023-28205: macOS Ventura 13.3.1 Apple Security Update: About the security content of macOS Ventura 13.3.1 Product: macOS Ventura Version: 13.3.1 CVE: CVE-2023-28205 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management.

CVE-2023-28206 [HIGH] CVE-2023-28206: macOS Ventura 13.3.1 Apple Security Update: About the security content of macOS Ventura 13.3.1 Product: macOS Ventura Version: 13.3.1 CVE: CVE-2023-28206 Component: IOSurfaceAccelerator Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2024-23222 [HIGH] CVE-2024-23222: macOS Ventura 13.6.4 Apple Security Update: About the security content of macOS Ventura 13.6.4 Product: macOS Ventura Version: 13.6.4 CVE: CVE-2024-23222 Component: CVE-2024-23222

CVE-2023-41064 [HIGH] CVE-2023-41064: macOS Ventura 13.5.2 Apple Security Update: About the security content of macOS Ventura 13.5.2 Product: macOS Ventura Version: 13.5.2 CVE: CVE-2023-41064 Component: ImageIO Impact: Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2023-41991 [MEDIUM] CVE-2023-41991: macOS Ventura 13.6 Apple Security Update: About the security content of macOS Ventura 13.6 Product: macOS Ventura Version: 13.6 CVE: CVE-2023-41991 Component: Security Impact: A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: A certificate validation issue was addressed.

CVE-2023-32439 [HIGH] CVE-2023-32439: macOS Ventura 13.4.1 Apple Security Update: About the security content of macOS Ventura 13.4.1 Product: macOS Ventura Version: 13.4.1 CVE: CVE-2023-32439 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A type confusion issue was addressed with improved checks.

CVE-2023-37450 [HIGH] CVE-2023-37450: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-37450 Component: WebKit Impact: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: The issue was addressed with improved checks.

CVE-2023-32435 [HIGH] CVE-2023-32435: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-32435 Component: WebKit Impact: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Description: A memory corruption issue was addressed with improved state management.

CVE-2023-32373 [HIGH] CVE-2023-32373: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32373 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use-after-free issue was addressed with improved memory management.

CVE-2022-42856 [HIGH] CVE-2022-42856: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42856 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1. Description: A type confusion issue was addressed with improved state handling.

CVE-2023-23529 [HIGH] CVE-2023-23529: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23529 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A type confusion issue was addressed with improved checks.

CVE-2023-32409 [HIGH] CVE-2023-32409: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32409 Component: WebKit Impact: A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited. Description: The issue was addressed with improved bounds checks.

CVE-2023-43000 [HIGH] CVE-2023-43000: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-43000 Component: WebKit Impact: Processing maliciously crafted web content may lead to memory corruption Description: A use-after-free issue was addressed with improved memory management.

CVE-2023-41990 [HIGH] CVE-2023-41990: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2023-41990 Component: FontParser Impact: Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. Description: The issue was addressed with improved handling of caches.

CVE-2022-48618 [HIGH] CVE-2022-48618: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-48618 Component: Kernel Impact: An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1. Description: The issue was addressed with improved checks.

CVE-2023-41992 [HIGH] CVE-2023-41992: macOS Ventura 13.6 Apple Security Update: About the security content of macOS Ventura 13.6 Product: macOS Ventura Version: 13.6 CVE: CVE-2023-41992 Component: Kernel Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks.

CVE-2024-23225 [HIGH] CVE-2024-23225: macOS Ventura 13.6.5 Apple Security Update: About the security content of macOS Ventura 13.6.5 Product: macOS Ventura Version: 13.6.5 CVE: CVE-2024-23225 Component: CVE-2024-23225 Impact: An app may be able to cause a denial-of-service Description: A permissions issue was addressed with additional restrictions.