Apple Macos Ventura vulnerabilities

CVE-2025-43233 [CRITICAL] CVE-2025-43233: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43233 Component: Security Impact: A malicious app acting as a HTTPS proxy could get access to sensitive user data Description: This issue was addressed with improved access restrictions.

CVE-2025-30460 [HIGH] CVE-2025-30460: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-30460 Component: Automator Impact: An app may be able to access protected user data Description: A permissions issue was addressed by removing vulnerable code and adding additional checks.

CVE-2023-23532 [HIGH] CVE-2023-23532: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-23532 Impact: An app may be able to break out of its sandbox Description: This issue was addressed with improved checks.

CVE-2022-32890 [HIGH] CVE-2022-32890: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32890 Component: ATS Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved checks.

CVE-2022-1619 [HIGH] CVE-2022-1619: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-1619 Component: CVE-2022-1619

CVE-2023-42947 [HIGH] CVE-2023-42947: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2023-42947 Component: TCC Impact: An app may be able to break out of its sandbox Description: A path handling issue was addressed with improved validation.

CVE-2025-24255 [HIGH] CVE-2025-24255: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24255 Component: Disk Images Impact: An app may be able to break out of its sandbox Description: A file access issue was addressed with improved input validation.

CVE-2023-29491 [HIGH] CVE-2023-29491: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-29491 Component: Music Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved validation of symlinks.

CVE-2022-32898 [HIGH] CVE-2022-32898: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32898 Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2023-38571 [HIGH] CVE-2023-38571: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38571 Component: Music Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved validation of symlinks.

CVE-2022-32947 [HIGH] CVE-2022-32947: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32947 Component: GPU Drivers Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2022-42801 [HIGH] CVE-2022-42801: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42801 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A logic issue was addressed with improved checks.

CVE-2025-24156 [HIGH] CVE-2025-24156: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2025-24156 Component: Xsan Impact: An app may be able to elevate privileges Description: An integer overflow was addressed through improved input validation.

CVE-2023-27930 [HIGH] CVE-2023-27930: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-27930 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A type confusion issue was addressed with improved checks.

CVE-2023-32418 [HIGH] CVE-2023-32418: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-32418 Component: Grapher Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2023-42856 [HIGH] CVE-2023-42856: macOS Ventura 13.6.1 Apple Security Update: About the security content of macOS Ventura 13.6.1 Product: macOS Ventura Version: 13.6.1 CVE: CVE-2023-42856 Component: Model I/O Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved memory handling.

CVE-2022-42847 [HIGH] CVE-2022-42847: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42847 Component: AMD Impact: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2022-42841 [HIGH] CVE-2022-42841: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42841 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1. Description: A type confusion issue was addressed with improved state handling.

CVE-2022-32942 [HIGH] CVE-2022-32942: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-32942 Component: DriverKit Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2022-32908 [HIGH] CVE-2022-32908: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32908 Component: MediaLibrary Impact: A user may be able to elevate privileges Description: A memory corruption issue was addressed with improved input validation.