Apple Macos Ventura vulnerabilities

CVE-2023-41996 [MEDIUM] CVE-2023-41996: macOS Ventura 13.6 Apple Security Update: About the security content of macOS Ventura 13.6 Product: macOS Ventura Version: 13.6 CVE: CVE-2023-41996 Component: Sandbox Impact: Apps that fail verification checks may still launch Description: The issue was addressed with improved checks.

CVE-2024-44183 [MEDIUM] CVE-2024-44183: macOS Ventura 13.7 Apple Security Update: About the security content of macOS Ventura 13.7 Product: macOS Ventura Version: 13.7 CVE: CVE-2024-44183 Component: Maps Impact: An app may be able to read sensitive location information Description: An issue was addressed with improved handling of temporary files.

CVE-2023-32400 [MEDIUM] CVE-2023-32400: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32400 Component: Accessibility Impact: Entitlements and privacy permissions granted to this app may be used by a malicious app Description: This issue was addressed with improved checks.

CVE-2025-24151 [MEDIUM] CVE-2025-24151: macOS Ventura 13.7.3 Apple Security Update: About the security content of macOS Ventura 13.7.3 Product: macOS Ventura Version: 13.7.3 CVE: CVE-2025-24151 Component: SMB Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling.

CVE-2025-31264 [HIGH] CVE-2025-31264: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-31264 Component: CVE-2024-56171 Impact: An app may be able to break out of its sandbox Description: This issue was addressed through improved state management.

CVE-2025-43266 [MEDIUM] CVE-2025-43266: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43266 Component: NSSpellChecker Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional restrictions.

CVE-2024-40829 [MEDIUM] CVE-2024-40829: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40829 Component: VoiceOver Impact: A user may be able to view restricted content from the lock screen Description: The issue was addressed with improved checks.

CVE-2022-32919 [MEDIUM] CVE-2022-32919: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-32919 Component: WebKit Impact: Visiting a website that frames malicious content may lead to UI spoofing Description: The issue was addressed with improved UI handling.

CVE-2025-24240 [MEDIUM] CVE-2025-24240: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24240 Component: StorageKit Impact: An app may be able to access user-sensitive data Description: A race condition was addressed with additional validation.

CVE-2023-41975 [MEDIUM] CVE-2023-41975: macOS Ventura 13.6.1 Apple Security Update: About the security content of macOS Ventura 13.6.1 Product: macOS Ventura Version: 13.6.1 CVE: CVE-2023-41975 Component: WindowServer Impact: A website may be able to access the microphone without the microphone use indicator being shown Description: This issue was addressed by removing the vulnerable code.

CVE-2025-31239 [MEDIUM] CVE-2025-31239: macOS Ventura 13.7.6 Apple Security Update: About the security content of macOS Ventura 13.7.6 Product: macOS Ventura Version: 13.7.6 CVE: CVE-2025-31239 Component: CoreMedia Impact: Parsing a file may lead to an unexpected app termination Description: A use-after-free issue was addressed with improved memory management.

CVE-2022-42807 [MEDIUM] CVE-2022-42807: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42807 Component: Photos Impact: A user may accidentally add a participant to a Shared Album by pressing the Delete key Description: A logic issue was addressed with improved state management.

CVE-2022-1420 [MEDIUM] CVE-2022-1420: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-1420 Component: CVE-2022-1420

CVE-2023-42854 [MEDIUM] CVE-2023-42854: macOS Ventura 13.6.1 Apple Security Update: About the security content of macOS Ventura 13.6.1 Product: macOS Ventura Version: 13.6.1 CVE: CVE-2023-42854 Component: FileProvider Impact: An app may be able to cause a denial-of-service to Endpoint Security clients Description: This issue was addressed by removing the vulnerable code.

CVE-2024-23201 [MEDIUM] CVE-2024-23201: macOS Ventura 13.6.5 Apple Security Update: About the security content of macOS Ventura 13.6.5 Product: macOS Ventura Version: 13.6.5 CVE: CVE-2024-23201 Component: CVE-2024-23225 Impact: An app may be able to cause a denial-of-service Description: A permissions issue was addressed with additional restrictions.

CVE-2023-38593 [MEDIUM] CVE-2023-38593: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38593 Component: Kernel Impact: A remote user may be able to cause a denial-of-service Description: The issue was addressed with improved checks.

CVE-2022-32895 [MEDIUM] CVE-2022-32895: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32895 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A race condition was addressed with improved state handling.

CVE-2023-27952 [MEDIUM] CVE-2023-27952: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-27952 Component: Safari Impact: An app may bypass Gatekeeper checks Description: A race condition was addressed with improved locking.

CVE-2024-23275 [MEDIUM] CVE-2024-23275: macOS Ventura 13.6.5 Apple Security Update: About the security content of macOS Ventura 13.6.5 Product: macOS Ventura Version: 13.6.5 CVE: CVE-2024-23275 Component: PackageKit Impact: An app may be able to access protected user data Description: A race condition was addressed with additional validation.

CVE-2024-40818 [MEDIUM] CVE-2024-40818: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40818 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.