Apple Macos Ventura vulnerabilities

CVE-2024-23270 [HIGH] CVE-2024-23270: macOS Ventura 13.6.5 Apple Security Update: About the security content of macOS Ventura 13.6.5 Product: macOS Ventura Version: 13.6.5 CVE: CVE-2024-23270 Component: Image Processing Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2024-27826 [HIGH] CVE-2024-27826: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-27826 Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2023-28181 [HIGH] CVE-2023-28181: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-28181 Component: CoreCapture Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2024-40781 [HIGH] CVE-2024-40781: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40781 Component: PackageKit Impact: A local attacker may be able to elevate their privileges Description: The issue was addressed with improved checks.

CVE-2023-32398 [HIGH] CVE-2023-32398: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32398 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management.

CVE-2023-32441 [HIGH] CVE-2023-32441: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-32441 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2024-40802 [HIGH] CVE-2024-40802: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40802 Component: PackageKit Impact: A local attacker may be able to elevate their privileges Description: The issue was addressed with improved checks.

CVE-2025-31222 [HIGH] CVE-2025-31222: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-31222 Component: Libinfo Impact: An app may be able to bypass ASLR Description: The issue was addressed with improved checks.

CVE-2023-41075 [HIGH] CVE-2023-41075: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-41075 Component: LaunchServices Impact: An app may be able to gain root privileges Description: This issue was addressed with improved checks.

CVE-2022-43454 [HIGH] CVE-2022-43454: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-43454 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A double free issue was addressed with improved memory management.

CVE-2023-42892 [HIGH] CVE-2023-42892: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2023-42892 Component: FileURL Impact: A local attacker may be able to elevate their privileges Description: A use-after-free issue was addressed with improved memory management.

CVE-2024-27817 [HIGH] CVE-2024-27817: macOS Ventura 13.6.7 Apple Security Update: About the security content of macOS Ventura 13.6.7 Product: macOS Ventura Version: 13.6.7 CVE: CVE-2024-27817 Component: CoreMedia Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved checks.

CVE-2025-30453 [HIGH] CVE-2025-30453: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-30453 Component: DiskArbitration Impact: A malicious app may be able to gain root privileges Description: The issue was addressed with additional permissions checks.

CVE-2025-31213 [HIGH] CVE-2025-31213: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-31213 Component: Security Impact: An app may be able to access associated usernames and websites in a user's iCloud Keychain Description: A logging issue was addressed with improved data redaction.

CVE-2025-24246 [CRITICAL] CVE-2025-24246: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24246 Component: OpenSSH Impact: An app may be able to access user-sensitive data Description: An injection issue was addressed with improved validation.

CVE-2025-24250 [CRITICAL] CVE-2025-24250: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24250 Component: Security Impact: A malicious app acting as a HTTPS proxy could get access to sensitive user data Description: This issue was addressed with improved access restrictions.

CVE-2025-24260 [CRITICAL] CVE-2025-24260: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24260 Component: SMB Impact: An app may be able to execute arbitrary code with kernel privileges Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2025-30462 [CRITICAL] CVE-2025-30462: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-30462 Component: Dock Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed by removing the vulnerable code.

CVE-2025-43222 [CRITICAL] CVE-2025-43222: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43222 Component: CFNetwork Impact: An attacker may be able to cause unexpected app termination Description: A use-after-free issue was addressed by removing the vulnerable code.

CVE-2025-43232 [CRITICAL] CVE-2025-43232: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43232 Component: PackageKit Impact: An app may be able to bypass certain Privacy preferences Description: A permissions issue was addressed with additional restrictions.