{
  "fix": "Sequoia 15.7",
  "url": "https://patchblox.com/security/fix/macos/sequoia-15.7",
  "summary": "Sequoia 15.7, released September 15, 2025, fixes 45 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sequoia 15.7",
  "released": "2025-09-15T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2024-27280, rated Critical",
  "supported": true,
  "cveCount": 45,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02364,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/125111",
  "appliesTo": [
    {
      "product": "Sequoia",
      "productUrl": "https://patchblox.com/security/product/macos/sequoia",
      "fixedVersion": "15.7",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-27280",
      "url": "https://patchblox.com/security/cve/CVE-2024-27280",
      "title": "Ruby: Processing a file may lead to a denial-of-service or potentially disclose memory contents",
      "component": "Ruby",
      "impact": "Processing a file may lead to a denial-of-service or potentially disclose memory contents",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.02364,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31255",
      "url": "https://patchblox.com/security/cve/CVE-2025-31255",
      "title": "IOKit: An app may be able to access sensitive user data",
      "component": "IOKit",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01627,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43359",
      "url": "https://patchblox.com/security/cve/CVE-2025-43359",
      "title": "Kernel: A UDP server socket bound to a local interface may become bound to all interfaces",
      "component": "Kernel",
      "impact": "A UDP server socket bound to a local interface may become bound to all interfaces",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0096,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31271",
      "url": "https://patchblox.com/security/cve/CVE-2025-31271",
      "title": "FaceTime: Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen",
      "component": "FaceTime",
      "impact": "Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43358",
      "url": "https://patchblox.com/security/cve/CVE-2025-43358",
      "title": "Shortcuts: A shortcut may be able to bypass sandbox restrictions",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass sandbox restrictions",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43304",
      "url": "https://patchblox.com/security/cve/CVE-2025-43304",
      "title": "StorageKit: An app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.00256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31259",
      "url": "https://patchblox.com/security/cve/CVE-2025-31259",
      "title": "Screenshots: An app may be able to capture a screenshot of an app entering or exiting full screen mode",
      "component": "Screenshots",
      "impact": "An app may be able to capture a screenshot of an app entering or exiting full screen mode",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43298",
      "url": "https://patchblox.com/security/cve/CVE-2025-43298",
      "title": "PackageKit: An app may be able to gain root privileges",
      "component": "PackageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43330",
      "url": "https://patchblox.com/security/cve/CVE-2025-43330",
      "title": "ATS: An app may be able to break out of its sandbox",
      "component": "ATS",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43286",
      "url": "https://patchblox.com/security/cve/CVE-2025-43286",
      "title": "SharedFileList: An app may be able to break out of its sandbox",
      "component": "SharedFileList",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43364",
      "url": "https://patchblox.com/security/cve/CVE-2025-43364",
      "title": "NetFSFramework: An app may be able to break out of its sandbox",
      "component": "NetFSFramework",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43306",
      "url": "https://patchblox.com/security/cve/CVE-2025-43306",
      "title": "StorageKit: A malicious app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46284",
      "url": "https://patchblox.com/security/cve/CVE-2025-46284",
      "title": "Crash Reporter: An app may be able to gain root privileges",
      "component": "Crash Reporter",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.00103,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43349",
      "url": "https://patchblox.com/security/cve/CVE-2025-43349",
      "title": "CoreAudio: Processing a maliciously crafted video file may lead to unexpected app termination",
      "component": "CoreAudio",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.8,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40909",
      "url": "https://patchblox.com/security/cve/CVE-2025-40909",
      "title": "Perl threads have a working directory race condition where file operations may target unintended paths",
      "component": "Perl",
      "impact": "Multiple issues in Perl",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43308",
      "url": "https://patchblox.com/security/cve/CVE-2025-43308",
      "title": "Touch Bar Controls: An app may be able to access sensitive user data",
      "component": "Touch Bar Controls",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00402,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43464",
      "url": "https://patchblox.com/security/cve/CVE-2025-43464",
      "title": "dyld: Visiting a website may lead to an app denial-of-service",
      "component": "dyld",
      "impact": "Visiting a website may lead to an app denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00381,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43285",
      "url": "https://patchblox.com/security/cve/CVE-2025-43285",
      "title": "AppSandbox: An app may be able to access protected user data",
      "component": "AppSandbox",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00344,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43190",
      "url": "https://patchblox.com/security/cve/CVE-2025-43190",
      "title": "Spell Check: An app may be able to access sensitive user data",
      "component": "Spell Check",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00269,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43302",
      "url": "https://patchblox.com/security/cve/CVE-2025-43302",
      "title": "IOHIDFamily: An app may be able to cause unexpected system termination",
      "component": "IOHIDFamily",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43312",
      "url": "https://patchblox.com/security/cve/CVE-2025-43312",
      "title": "AMD: An app may be able to cause unexpected system termination",
      "component": "AMD",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43314",
      "url": "https://patchblox.com/security/cve/CVE-2025-43314",
      "title": "StorageKit: An app may be able to access sensitive user data",
      "component": "StorageKit",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00248,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43355",
      "url": "https://patchblox.com/security/cve/CVE-2025-43355",
      "title": "MobileStorageMounter: An app may be able to cause a denial-of-service",
      "component": "MobileStorageMounter",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43293",
      "url": "https://patchblox.com/security/cve/CVE-2025-43293",
      "title": "SharedFileList: An app may be able to access sensitive user data",
      "component": "SharedFileList",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43299",
      "url": "https://patchblox.com/security/cve/CVE-2025-43299",
      "title": "libc: An app may be able to cause a denial-of-service",
      "component": "libc",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43311",
      "url": "https://patchblox.com/security/cve/CVE-2025-43311",
      "title": "Touch Bar: An app may be able to access protected user data",
      "component": "Touch Bar",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43301",
      "url": "https://patchblox.com/security/cve/CVE-2025-43301",
      "title": "Notification Center: An app may be able to access contact info related to notifications in Notification Center",
      "component": "Notification Center",
      "impact": "An app may be able to access contact info related to notifications in Notification Center",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43357",
      "url": "https://patchblox.com/security/cve/CVE-2025-43357",
      "title": "Call History: An app may be able to fingerprint the user",
      "component": "Call History",
      "impact": "An app may be able to fingerprint the user",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43326",
      "url": "https://patchblox.com/security/cve/CVE-2025-43326",
      "title": "GPU Drivers: An app may be able to access sensitive user data",
      "component": "GPU Drivers",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43305",
      "url": "https://patchblox.com/security/cve/CVE-2025-43305",
      "title": "CoreServices: A malicious app may be able to access private information",
      "component": "CoreServices",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43319",
      "url": "https://patchblox.com/security/cve/CVE-2025-43319",
      "title": "MediaLibrary: An app may be able to access protected user data",
      "component": "MediaLibrary",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43321",
      "url": "https://patchblox.com/security/cve/CVE-2025-43321",
      "title": "AppKit: An app may be able to access protected user data",
      "component": "AppKit",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43291",
      "url": "https://patchblox.com/security/cve/CVE-2025-43291",
      "title": "SharedFileList: An app may be able to modify protected parts of the file system",
      "component": "SharedFileList",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24197",
      "url": "https://patchblox.com/security/cve/CVE-2025-24197",
      "title": "Spotlight: An app may be able to access sensitive user data",
      "component": "Spotlight",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31268",
      "url": "https://patchblox.com/security/cve/CVE-2025-31268",
      "title": "Apple Online Store Kit: An app may be able to access protected user data",
      "component": "Apple Online Store Kit",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43315",
      "url": "https://patchblox.com/security/cve/CVE-2025-43315",
      "title": "MigrationKit: An app may be able to access user-sensitive data",
      "component": "MigrationKit",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43310",
      "url": "https://patchblox.com/security/cve/CVE-2025-43310",
      "title": "WindowServer: An app may be able to trick a user into copying sensitive data to the pasteboard",
      "component": "WindowServer",
      "impact": "An app may be able to trick a user into copying sensitive data to the pasteboard",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.4,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43353",
      "url": "https://patchblox.com/security/cve/CVE-2025-43353",
      "title": "Libinfo: Processing a maliciously crafted string may lead to heap corruption",
      "component": "Libinfo",
      "impact": "Processing a maliciously crafted string may lead to heap corruption",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43332",
      "url": "https://patchblox.com/security/cve/CVE-2025-43332",
      "title": "Security Initialization: An app may be able to break out of its sandbox",
      "component": "Security Initialization",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.2,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43288",
      "url": "https://patchblox.com/security/cve/CVE-2025-43288",
      "title": "Archive Utility: An app may be able to bypass Privacy preferences",
      "component": "Archive Utility",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43292",
      "url": "https://patchblox.com/security/cve/CVE-2025-43292",
      "title": "CoreMedia: An app may be able to access sensitive user data",
      "component": "CoreMedia",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43508",
      "url": "https://patchblox.com/security/cve/CVE-2025-43508",
      "title": "Phone: An app may be able to access sensitive user data",
      "component": "Phone",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43345",
      "url": "https://patchblox.com/security/cve/CVE-2025-43345",
      "title": "Kernel: An app may be able to access sensitive user data",
      "component": "Kernel",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43289",
      "url": "https://patchblox.com/security/cve/CVE-2025-43289",
      "title": "CoreServices: A malicious app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "A malicious app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43290",
      "url": "https://patchblox.com/security/cve/CVE-2025-43290",
      "title": "CoreServices: An app may be able to modify protected parts of the file system",
      "component": "CoreServices",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}