macOS Sonoma

CVEs (587)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-42826	Apple Inc. macOS	Hig	0.51	7.8	0.00	Jan 10, 2024	The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead to arbitrary code execution.
CVE-2023-42926	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42912	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42911	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42909	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42908	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42906	Apple Inc. macOS	Hig	0.51	7.8	0.01	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42905	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42904	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42903	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42902	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42901	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42886	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrary code execution.
CVE-2023-42856	Apple Inc. macOS	Hig	0.51	7.8	0.00	Oct 25, 2023	The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. Processing a file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-40404	Apple Inc. macOS	Hig	0.51	7.8	0.01	Oct 25, 2023	A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-38615	Apple Inc. macOS	Hig	0.51	7.8	0.00	Sep 27, 2023	The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-32396	Apple Inc. macOS	Hig	0.51	7.8	0.00	Sep 27, 2023	This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges.
CVE-2023-32377	Apple Inc. macOS	Hig	0.51	7.8	0.00	Sep 27, 2023	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
CVE-2026-20620	Apple Inc. macOS	Hig	0.50	7.7	0.00	Feb 11, 2026	An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An attacker may be able to cause unexpected system termination or read kernel memory.
CVE-2025-24174	Apple Inc. macOS	Hig	0.50	7.7	0.00	Jan 27, 2025	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences.

CVE-2023-42826HigJan 10, 2024
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead to arbitrary code execution.
CVE-2023-42926HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42912HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42911HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42909HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42908HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42906HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42905HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42904HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42903HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42902HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42901HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42886HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrary code execution.
CVE-2023-42856HigOct 25, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. Processing a file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-40404HigOct 25, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-38615HigSep 27, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-32396HigSep 27, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges.
CVE-2023-32377HigSep 27, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
CVE-2026-20620HigFeb 11, 2026
Apple Inc.
macOS
risk 0.50cvss 7.7epss 0.00
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An attacker may be able to cause unexpected system termination or read kernel memory.
CVE-2025-24174HigJan 27, 2025
Apple Inc.
macOS
risk 0.50cvss 7.7epss 0.00
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences.

Page 8 of 30