Apple Macos Ventura vulnerabilities

CVE-2024-40855 [MEDIUM] CVE-2024-40855: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-40855 Component: DiskArbitration Impact: A sandboxed app may be able to access sensitive user data Description: The issue was addressed with improved checks.

CVE-2023-42935 [MEDIUM] CVE-2023-42935: macOS Ventura 13.6.4 Apple Security Update: About the security content of macOS Ventura 13.6.4 Product: macOS Ventura Version: 13.6.4 CVE: CVE-2023-42935 Component: LoginWindow Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen Description: An authentication issue was addressed with improved state management.

CVE-2024-44177 [MEDIUM] CVE-2024-44177: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44177 Component: Dock Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed by removing sensitive data.

CVE-2024-44184 [MEDIUM] CVE-2024-44184: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44184 Component: Transparency Impact: An app may be able to access user-sensitive data Description: A permissions issue was addressed with additional restrictions.

CVE-2024-44205 [MEDIUM] CVE-2024-44205: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-44205 Component: Siri Impact: A sandboxed app may be able to access sensitive user data in system logs Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-31248 [MEDIUM] CVE-2025-31248: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2025-31248 Component: UserAccountUpdater Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2023-28207 [MEDIUM] CVE-2023-28207: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-28207 Component: AppleMobileFileIntegrity Impact: A plug-in may be able to inherit app permissions and access user data Description: The issue was addressed with improved checks.

CVE-2022-32833 [MEDIUM] CVE-2022-32833: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32833 Component: WebKit Storage Impact: An app may be able to bypass Privacy preferences Description: The issue was addressed with improved handling of caches.

CVE-2023-34352 [MEDIUM] CVE-2023-34352: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-34352 Component: Accounts Impact: An attacker may be able to leak user account emails Description: A permissions issue was addressed with improved redaction of sensitive information.

CVE-2022-29458 [HIGH] CVE-2022-29458: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-29458 Component: CVE-2022-29458

CVE-2025-31235 [MEDIUM] CVE-2025-31235: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-31235 Component: Audio Impact: An app may be able to cause unexpected system termination Description: A double free issue was addressed with improved memory management.

CVE-2025-43238 [MEDIUM] CVE-2025-43238: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43238 Component: Xsan Impact: An app may be able to cause unexpected system termination Description: An integer overflow was addressed with improved input validation.

CVE-2023-32407 [MEDIUM] CVE-2023-32407: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32407 Component: Metal Impact: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved state management.

CVE-2024-27810 [MEDIUM] CVE-2024-27810: macOS Ventura 13.6.7 Apple Security Update: About the security content of macOS Ventura 13.6.7 Product: macOS Ventura Version: 13.6.7 CVE: CVE-2024-27810 Component: Maps Impact: An app may be able to read sensitive location information Description: A path handling issue was addressed with improved validation.

CVE-2025-24103 [MEDIUM] CVE-2025-24103: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2025-24103 Component: Security Impact: An app may be able to access protected user data Description: This issue was addressed with improved validation of symlinks.

CVE-2024-27789 [MEDIUM] CVE-2024-27789: macOS Ventura 13.6.7 Apple Security Update: About the security content of macOS Ventura 13.6.7 Product: macOS Ventura Version: 13.6.7 CVE: CVE-2024-27789 Component: Foundation Impact: An app may be able to access user-sensitive data Description: A logic issue was addressed with improved checks.

CVE-2024-44196 [MEDIUM] CVE-2024-44196: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44196 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.

CVE-2024-44279 [MEDIUM] CVE-2024-44279: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44279 Component: Shortcuts Impact: A malicious app may use shortcuts to access restricted files Description: A logic issue was addressed with improved checks.

CVE-2025-24109 [MEDIUM] CVE-2025-24109: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2025-24109 Component: AppleMobileFileIntegrity Impact: An app may be able to access sensitive user data Description: A downgrade issue was addressed with additional code-signing restrictions.

CVE-2024-44151 [MEDIUM] CVE-2024-44151: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44151 Component: Automator Impact: An Automator Quick Action workflow may be able to bypass Gatekeeper Description: This issue was addressed by adding an additional prompt for user consent.