Apple Macos Ventura vulnerabilities

CVE-2023-41073 [MEDIUM] CVE-2023-41073: macOS Ventura 13.6 Apple Security Update: About the security content of macOS Ventura 13.6 Product: macOS Ventura Version: 13.6 CVE: CVE-2023-41073 Component: Kernel Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks.

CVE-2023-41254 [MEDIUM] CVE-2023-41254: macOS Ventura 13.6.1 Apple Security Update: About the security content of macOS Ventura 13.6.1 Product: macOS Ventura Version: 13.6.1 CVE: CVE-2023-41254 Component: Weather Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-24149 [MEDIUM] CVE-2025-24149: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2025-24149 Component: SceneKit Impact: Parsing a file may lead to disclosure of user information Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2025-24244 [MEDIUM] CVE-2025-24244: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24244 Component: Audio Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: The issue was addressed with improved memory handling.

CVE-2022-42798 [MEDIUM] CVE-2022-42798: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42798 Component: Audio Impact: Parsing a maliciously crafted audio file may lead to disclosure of user information Description: The issue was addressed with improved memory handling.

CVE-2023-42937 [MEDIUM] CVE-2023-42937: macOS Ventura 13.6.4 Apple Security Update: About the security content of macOS Ventura 13.6.4 Product: macOS Ventura Version: 13.6.4 CVE: CVE-2023-42937 Component: Accessibility Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2024-40833 [MEDIUM] CVE-2024-40833: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40833 Component: Shortcuts Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: A logic issue was addressed with improved checks.

CVE-2023-40406 [MEDIUM] CVE-2023-40406: macOS Ventura 13.6 Apple Security Update: About the security content of macOS Ventura 13.6 Product: macOS Ventura Version: 13.6 CVE: CVE-2023-40406 Component: ColorSync Impact: An app may be able to read arbitrary files Description: The issue was addressed with improved checks.

CVE-2024-40823 [MEDIUM] CVE-2024-40823: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40823 Component: PackageKit Impact: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks.

CVE-2023-32370 [MEDIUM] CVE-2023-32370: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-32370 Component: WebKit Impact: Content Security Policy to block domains with wildcards may fail Description: A logic issue was addressed with improved validation.

CVE-2024-40775 [MEDIUM] CVE-2024-40775: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40775 Component: AppleMobileFileIntegrity Impact: An app may be able to leak sensitive user information Description: A downgrade issue was addressed with additional code-signing restrictions.

CVE-2023-23527 [MEDIUM] CVE-2023-23527: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-23527 Component: AppleMobileFileIntegrity Impact: A user may gain access to protected parts of the file system Description: The issue was addressed with improved checks.

CVE-2024-44239 [MEDIUM] CVE-2024-44239: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44239 Component: Kernel Impact: An app may be able to leak sensitive kernel state Description: An information disclosure issue was addressed with improved private data redaction for log entries.

CVE-2024-40850 [MEDIUM] CVE-2024-40850: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-40850 Component: Game Center Impact: An app may be able to access user-sensitive data Description: A file access issue was addressed with improved input validation.

CVE-2023-42893 [MEDIUM] CVE-2023-42893: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2023-42893 Component: CVE-2023-42893

CVE-2025-24271 [MEDIUM] CVE-2025-24271: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24271 Component: AirPlay Impact: An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing Description: An access issue was addressed with improved access restrictions.

CVE-2024-27827 [MEDIUM] CVE-2024-27827: macOS Ventura 13.6.7 Apple Security Update: About the security content of macOS Ventura 13.6.7 Product: macOS Ventura Version: 13.6.7 CVE: CVE-2024-27827 Component: Finder Impact: An app may be able to read arbitrary files Description: This issue was addressed through improved state management.

CVE-2023-23535 [MEDIUM] CVE-2023-23535: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-23535 Component: ImageIO Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved memory handling.

CVE-2024-23272 [MEDIUM] CVE-2024-23272: macOS Ventura 13.6.5 Apple Security Update: About the security content of macOS Ventura 13.6.5 Product: macOS Ventura Version: 13.6.5 CVE: CVE-2024-23272 Component: Storage Services Impact: An attacker may gain access to protected parts of the file system Description: A logic issue was addressed with improved checks.

CVE-2024-40847 [MEDIUM] CVE-2024-40847: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-40847 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: The issue was addressed with additional code-signing restrictions.