Apple Macos Ventura vulnerabilities

CVE-2024-23218 [MEDIUM] CVE-2024-23218: macOS Ventura 13.6.5 Apple Security Update: About the security content of macOS Ventura 13.6.5 Product: macOS Ventura Version: 13.6.5 CVE: CVE-2024-23218 Component: CoreCrypto Impact: An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key Description: A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions.

CVE-2024-44176 [MEDIUM] CVE-2024-44176: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44176 Component: ImageIO Impact: Processing an image may lead to a denial-of-service Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2024-44213 [MEDIUM] CVE-2024-44213: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44213 Component: CUPS Impact: An attacker in a privileged network position may be able to leak sensitive user information Description: An issue existed in the parsing of URLs. This issue was addressed with improved input validation.

CVE-2023-0512 [HIGH] CVE-2023-0512: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-0512 Component: CVE-2023-0512

CVE-2024-40799 [HIGH] CVE-2024-40799: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40799 Component: CoreGraphics Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2020-19189 [MEDIUM] CVE-2020-19189: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2020-19189 Component: CVE-2020-19189

CVE-2023-32357 [HIGH] CVE-2023-32357: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32357 Component: Sandbox Impact: An app may be able to retain access to system configuration files even after its permission is revoked Description: An authorization issue was addressed with improved state management.

CVE-2023-42832 [HIGH] CVE-2023-42832: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-42832 Component: Software Update Impact: An app may be able to gain root privileges Description: A race condition was addressed with improved state handling.

CVE-2023-3618 [MEDIUM] CVE-2023-3618: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2023-3618 Component: CVE-2023-3618 Impact: A remote user may be able to cause unexpected app termination or arbitrary code execution Description: This issue was addressed with improved checks.

CVE-2024-54497 [MEDIUM] CVE-2024-54497: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2024-54497 Component: QuartzCore Impact: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved checks.

CVE-2023-1801 [MEDIUM] CVE-2023-1801: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-1801 Component: CVE-2023-1801

CVE-2023-28187 [MEDIUM] CVE-2023-28187: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-28187 Component: Kernel Impact: A user may be able to cause a denial-of-service Description: This issue was addressed with improved state management.

CVE-2025-24157 [MEDIUM] CVE-2025-24157: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24157 Component: Xsan Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2025-43247 [MEDIUM] CVE-2025-43247: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43247 Component: PackageKit Impact: A malicious app with root privileges may be able to modify the contents of system files Description: A permissions issue was addressed with additional restrictions.

CVE-2024-40814 [HIGH] CVE-2024-40814: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-40814 Component: AppleMobileFileIntegrity Impact: An app may be able to bypass Privacy preferences Description: A downgrade issue was addressed with additional code-signing restrictions.

CVE-2020-19186 [MEDIUM] CVE-2020-19186: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2020-19186 Component: CVE-2020-19186

CVE-2020-19190 [MEDIUM] CVE-2020-19190: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2020-19190 Component: CVE-2020-19190 Impact: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: An access issue was addressed with improvements to the sandbox.

CVE-2022-0108 [MEDIUM] CVE-2022-0108: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2022-0108 Component: WebKit Impact: An HTML document may be able to render iframes with sensitive user information Description: This issue was addressed with improved iframe sandbox enforcement.

CVE-2023-28320 [MEDIUM] CVE-2023-28320: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-28320 Component: CVE-2023-28320

CVE-2023-29469 [MEDIUM] CVE-2023-29469: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-29469 Component: LaunchServices Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks.