Apple Macos Ventura vulnerabilities

CVE-2022-43552 [MEDIUM] CVE-2022-43552: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2022-43552 Component: CVE-2022-43552 Impact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution Description: A memory initialization issue was addressed.

CVE-2023-28188 [MEDIUM] CVE-2023-28188: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-28188 Component: TextKit Impact: A remote user may be able to cause a denial-of-service Description: A denial-of-service issue was addressed with improved input validation.

CVE-2022-42818 [MEDIUM] CVE-2022-42818: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42818 Component: Notes Impact: A user in a privileged network position may be able to track user activity Description: This issue was addressed with improved data protection.

CVE-2024-27876 [MEDIUM] CVE-2024-27876: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-27876 Component: Compression Impact: Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files Description: A race condition was addressed with improved locking.

CVE-2014-1745 [HIGH] CVE-2014-1745: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2014-1745 Component: WebKit Impact: Processing a file may lead to a denial-of-service or potentially disclose memory contents Description: The issue was addressed with improved checks.

CVE-2023-40454 [HIGH] CVE-2023-40454: macOS Ventura 13.6 Apple Security Update: About the security content of macOS Ventura 13.6 Product: macOS Ventura Version: 13.6 CVE: CVE-2023-40454 Component: Kernel Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks.

CVE-2025-43239 [HIGH] CVE-2025-43239: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43239 Component: Single Sign-On Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks.

CVE-2024-40821 [HIGH] CVE-2024-40821: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40821 Component: Security Impact: Third party app extensions may not receive the correct sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions.

CVE-2025-43254 [HIGH] CVE-2025-43254: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43254 Component: Disk Images Impact: Running an hdiutil command may unexpectedly execute arbitrary code Description: This issue was addressed by removing the vulnerable code.

CVE-2020-19187 [MEDIUM] CVE-2020-19187: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2020-19187 Component: CVE-2020-19187

CVE-2020-19185 [MEDIUM] CVE-2020-19185: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2020-19185 Component: CVE-2020-19185

CVE-2020-19188 [MEDIUM] CVE-2020-19188: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2020-19188 Component: CVE-2020-19188

CVE-2022-42821 [MEDIUM] CVE-2022-42821: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42821 Component: BOM Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks.

CVE-2022-42799 [MEDIUM] CVE-2022-42799: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42799 Component: WebKit Impact: Visiting a malicious website may lead to user interface spoofing Description: The issue was addressed with improved UI handling.

CVE-2024-27840 [MEDIUM] CVE-2024-27840: macOS Ventura 13.6.7 Apple Security Update: About the security content of macOS Ventura 13.6.7 Product: macOS Ventura Version: 13.6.7 CVE: CVE-2024-27840 Component: Kernel Impact: An attacker that has already achieved kernel code execution may be able to bypass kernel memory protections Description: The issue was addressed with improved memory handling.

CVE-2023-32445 [MEDIUM] CVE-2023-32445: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-32445 Component: WebKit Impact: Processing a document may lead to a cross site scripting attack Description: This issue was addressed with improved checks.

CVE-2023-28180 [MEDIUM] CVE-2023-28180: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-28180 Component: CVE-2022-43552 Impact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution Description: A memory initialization issue was addressed.

CVE-2024-44167 [MEDIUM] CVE-2024-44167: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44167 Component: Notes Impact: An app may be able to overwrite arbitrary files Description: This issue was addressed by removing the vulnerable code.

CVE-2025-31241 [MEDIUM] CVE-2025-31241: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-31241 Component: Kernel Impact: A remote attacker may cause an unexpected app termination Description: A double free issue was addressed with improved memory management.

CVE-2022-32938 [MEDIUM] CVE-2022-32938: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32938 Component: Shortcuts Impact: A shortcut may be able to check the existence of an arbitrary path on the file system Description: A parsing issue in the handling of directory paths was addressed with improved path validation.