PT-2025-31270

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.3 macOS Ventura versions prior to 13.7.7 macOS Sonoma versions prior to 14.7.7 Description An application may be able to execute arbitrary code outside of its intended security restrictions sandbox or with...

CVE-2024-44300

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...

CVE-2024-54489

CVE-2024-54489 describes a path handling issue that could allow arbitrary code execution when running a mount command. Affected: macOS Disk Utility across macOS Sonoma 14.7.2, macOS Ventura 13.7.2, and macOS Sequoia 15.2. Root cause: inadequate path validation; a fix with improved validation is i...

CVE-2024-54489

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Running a mount command may unexpectedly execute arbitrary code...

CVE-2024-54498

CVE-2024-54498 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The underlying issue is a path handling problem involving insufficient validation, which could allow an app to break out of its sandbox. The publicly documented impact is sandbox escape; no exploit details a...

CVE-2024-54528

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to overwrite arbitrary files...

CVE-2024-44224

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app may be able to gain root privileges...

CVE-2024-44300

The CVE-2024-44300 entry describes a logic issue in macOS where improved file handling fixes allow an app to access protected user data. Affected products and versions cited include macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. Remediation is via these OS updates; no specific...

CVE-2024-44300

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access protected user data...

PT-2025-13868

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 macOS Sonoma versions prior to 14.7.5 Description The issue was addressed with improved handling of protocols. An attacker in a privileged network position can track a user's activity. Recommendations For...

Apple Releases Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply necessary updates: i...

CVE-2024-40801

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected user data...

CVE-2024-40848

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An attacker may be able to read sensitive information...

CVE-2024-44151

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system...

CVE-2024-40797

This CVE-2024-40797 affects macOS where visiting a malicious website may cause user interface spoofing. It is addressed by improved state management and is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The NVD/NDA references describe a network-accessible issue with UI spoo...

CVE-2024-40800

CVE-2024-40800 is an input-validation vulnerability fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The issue allows an app to modify protected parts of the file system. Root cause: insufficient input validation in a component/process used by macOS; the core impact is...

CVE-2024-23261

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user...

Apple Released Security Updates for Safari and macOS

Apple released security updates to address a vulnerability CVE-2024-1580 in Safari and macOS. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates:...

Apple Released Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in Safari, macOS, watchOS, tvOS, and visionOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply t...

CVE-2024-23247

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Processing a file may lead to unexpected app termination or arbitrary code execution...