Apple Macos Ventura vulnerabilities

CVE-2024-23275 [MEDIUM] CVE-2024-23275: macOS Ventura 13.6.5 Apple Security Update: About the security content of macOS Ventura 13.6.5 Product: macOS Ventura Version: 13.6.5 CVE: CVE-2024-23275 Component: PackageKit Impact: An app may be able to access protected user data Description: A race condition was addressed with additional validation.

CVE-2024-40818 [MEDIUM] CVE-2024-40818: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-40818 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2022-46713 [MEDIUM] CVE-2022-46713: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-46713 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A race condition was addressed with additional validation.

CVE-2022-46725 [MEDIUM] CVE-2022-46725: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46725 Component: WebKit Impact: Visiting a malicious website may lead to address bar spoofing Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

CVE-2025-24279 [MEDIUM] CVE-2025-24279: macOS Ventura 13.7.5 Apple Security Update: About the security content of macOS Ventura 13.7.5 Product: macOS Ventura Version: 13.7.5 CVE: CVE-2025-24279 Component: Voice Control Impact: An app may be able to access contacts Description: This issue was addressed with improved file handling.

CVE-2024-44260 [MEDIUM] CVE-2024-44260: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44260 Component: Assets Impact: A malicious app with root privileges may be able to modify the contents of system files Description: This issue was addressed by removing the vulnerable code.

CVE-2023-28208 [MEDIUM] CVE-2023-28208: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2023-28208 Component: Messages Impact: A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM Description: A logic issue was addressed with improved state management.

CVE-2022-42807 [MEDIUM] CVE-2022-42807: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42807 Component: Photos Impact: A user may accidentally add a participant to a Shared Album by pressing the Delete key Description: A logic issue was addressed with improved state management.

CVE-2022-1674 [MEDIUM] CVE-2022-1674: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-1674 Component: CVE-2022-1674

CVE-2022-32827 [MEDIUM] CVE-2022-32827: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32827 Component: AppleAVD Impact: An app may be able to cause a denial-of-service Description: A memory corruption issue was addressed with improved state management.

CVE-2023-32385 [MEDIUM] CVE-2023-32385: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32385 Component: PDFKit Impact: Opening a PDF file may lead to unexpected app termination Description: A denial-of-service issue was addressed with improved memory handling.

CVE-2022-26699 [MEDIUM] CVE-2022-26699: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-26699 Component: TCC Impact: An app may be able to cause a denial-of-service to Endpoint Security clients Description: A logic issue was addressed with improved state management.

CVE-2023-27952 [MEDIUM] CVE-2023-27952: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-27952 Component: Safari Impact: An app may bypass Gatekeeper checks Description: A race condition was addressed with improved locking.

CVE-2024-44137 [MEDIUM] CVE-2024-44137: macOS Ventura 13.7.1 Apple Security Update: About the security content of macOS Ventura 13.7.1 Product: macOS Ventura Version: 13.7.1 CVE: CVE-2024-44137 Component: Screen Capture Impact: An attacker with physical access may be able to share items from the lock screen Description: The issue was addressed with improved checks.

CVE-2023-42952 [MEDIUM] CVE-2023-42952: macOS Ventura 13.6.3 Apple Security Update: About the security content of macOS Ventura 13.6.3 Product: macOS Ventura Version: 13.6.3 CVE: CVE-2023-42952 Component: Automation Impact: An app with root privileges may be able to access private information Description: The issue was addressed with improved checks.

CVE-2022-32935 [MEDIUM] CVE-2022-32935: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32935 Component: FaceTime Impact: A user may be able to view restricted content from the lock screen Description: A lock screen issue was addressed with improved state management.

CVE-2023-32391 [MEDIUM] CVE-2023-32391: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32391 Component: Shortcuts Impact: A shortcut may be able to use sensitive data with certain actions without prompting the user Description: The issue was addressed with improved checks.

CVE-2025-43259 [MEDIUM] CVE-2025-43259: macOS Ventura 13.7.7 Apple Security Update: About the security content of macOS Ventura 13.7.7 Product: macOS Ventura Version: 13.7.7 CVE: CVE-2025-43259 Component: WindowServer Impact: An attacker with physical access to a locked device may be able to view sensitive user information Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-28322 [LOW] CVE-2023-28322: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-28322 Component: CVE-2023-28322

CVE-2024-27882 [MEDIUM] CVE-2024-27882: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-27882 Component: PackageKit Impact: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions.