CVE-2024-44250

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2024-44219

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious application with root privileges may be able to access private information...

CVE-2024-40858

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent...

CVE-2024-40849

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to break out of its sandbox...

CVE-2025-43236

Apple macOS is affected by a type confusion vulnerability caused by inadequate memory handling. This security flaw can be exploited by an attacker to trigger an unexpected application termination . The issue has been addressed with improved memory handling in the following versions: macOS Sequoia...

CVE-2025-43257

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox...

CVE-2025-43257

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox...

CVE-2025-43257

Apple macOS Sequoia is vulnerable to a security bypass where an application may be able to break out of its sandbox . The root cause involves a flaw in symlink handling , which has been addressed in macOS Sequoia 15.6 . While a proof-of-concept was published on Telegram in April 2026, specific te...

CVE-2024-40849

A race condition vulnerability exists in the Launch Services interface of macOS Sequoia , caused by synchronization errors when accessing shared resources. This flaw could allow an attacker to bypass the sandbox protection mechanism , potentially enabling an application to break out of its restri...

CVE-2024-44303

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system...

CVE-2024-44303

The PackageKit component in macOS Sequoia 15.1 (and potentially other versions) is vulnerable due to insufficient input validation . This flaw could allow a malicious application to modify protected parts of the file system or enable an attacker to execute arbitrary code . The issue was addressed...

CVE-2024-44250

A permissions issue in the XPC service of macOS allows an application to execute arbitrary code outside of its sandbox or with elevated privileges due to deficiencies in access control . This vulnerability is resolved in macOS Sequoia 15.1 . No specific exploit details or links are provided.

CVE-2024-44250

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2024-40858

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent...

CVE-2024-40858

A permissions issue in macOS versions prior to 15.1 allowed an application to access Contacts without user consent. This vulnerability was addressed by implementing additional restrictions. The issue is fixed in macOS Sequoia 15.1 . For remediation, users are recommended to update to macOS versio...

CVE-2024-40858

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent...

CVE-2025-43264

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may corrupt process memory...

CVE-2025-43264

A memory corruption vulnerability exists in Apple macOS Sequoia , where processing a maliciously crafted image may result in process memory corruption. The root cause is attributed to an issue in the model I/O component . This vulnerability can potentially lead to arbitrary code execution on the ...

CVE-2024-44286

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access can input keyboard events to apps running on a locked device...

CVE-2024-44286

A state management flaw in macOS Sequoia 15.1 (and prior versions) allows an attacker with physical access to input keyboard events into applications running on a locked device . This issue was addressed through improved state management. Remediation is available by updating to macOS Sequoia 15.1...