Apple Macos Ventura vulnerabilities

CVE-2024-44281 [MEDIUM] CVE-2024-44281: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44281 Component: Shortcuts Impact: A malicious app may use shortcuts to access restricted files Description: A logic issue was addressed with improved checks.

CVE-2024-44178 [MEDIUM] CVE-2024-44178: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44178 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved validation of symlinks.

CVE-2024-27805 [MEDIUM] CVE-2024-27805: macOS Ventura 13.6.7 Apple Security Update: About the security content of macOS Ventura 13.6.7 Product: macOS Ventura Version: 13.6.7 CVE: CVE-2024-27805 Component: Core Data Impact: An app may be able to access sensitive user data Description: An issue was addressed with improved validation of environment variables.

CVE-2023-32382 [MEDIUM] CVE-2023-32382: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32382 Component: Model I/O Impact: Processing a 3D model may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-27929 [MEDIUM] CVE-2023-27929: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-27929 Component: ImageIO Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2022-32902 [MEDIUM] CVE-2022-32902: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32902 Component: ATS Impact: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved state management.

CVE-2024-44278 [MEDIUM] CVE-2024-44278: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44278 Component: Siri Impact: A sandboxed app may be able to access sensitive user data in system logs Description: An information disclosure issue was addressed with improved private data redaction for log entries.

CVE-2023-27956 [MEDIUM] CVE-2023-27956: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-27956 Component: FontParser Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved memory handling.

CVE-2025-24144 [MEDIUM] CVE-2025-24144: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-24144 Component: Kernel Impact: An app may be able to leak sensitive kernel state Description: An information disclosure issue was addressed by removing the vulnerable code.

CVE-2023-32403 [MEDIUM] CVE-2023-32403: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32403 Component: NetworkExtension Impact: An app may be able to read sensitive location information Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-54469 [MEDIUM] CVE-2024-54469: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-54469 Component: FileProvider Impact: A local user may be able to leak sensitive user information Description: The issue was addressed with improved checks.

CVE-2024-40844 [MEDIUM] CVE-2024-40844: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-40844 Component: Shortcuts Impact: An app may be able to observe data displayed to the user by Shortcuts Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2024-40807 [MEDIUM] CVE-2024-40807: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40807 Component: Shortcuts Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: A logic issue was addressed with improved checks.

CVE-2025-31242 [MEDIUM] CVE-2025-31242: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2025-31242 Component: StoreKit Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2024-44253 [MEDIUM] CVE-2024-44253: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44253 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks.

CVE-2025-31220 [MEDIUM] CVE-2025-31220: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-31220 Component: Weather Impact: A malicious app may be able to read sensitive location information Description: A privacy issue was addressed by removing sensitive data.

CVE-2024-44181 [MEDIUM] CVE-2024-44181: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44181 Component: Maps Impact: An app may be able to read sensitive location information Description: An issue was addressed with improved handling of temporary files.

CVE-2024-44182 [MEDIUM] CVE-2024-44182: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44182 Component: App Intents Impact: An app may be able to access sensitive data logged when a shortcut fails to launch another app Description: This issue was addressed with improved redaction of sensitive information.

CVE-2024-44166 [MEDIUM] CVE-2024-44166: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44166 Component: System Settings Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2024-54471 [MEDIUM] CVE-2024-54471: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-54471 Component: NetAuth Impact: A malicious application may be able to leak a user's credentials Description: This issue was addressed with additional entitlement checks.