{
  "fix": "Sonoma 14.7.2",
  "url": "https://patchblox.com/security/fix/macos/sonoma-14.7.2",
  "summary": "Sonoma 14.7.2, released December 11, 2024, fixes 39 CVEs in Sonoma. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sonoma 14.7.2",
  "released": "2024-12-11T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2024-45490, rated Critical",
  "supported": true,
  "cveCount": 39,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.03385,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/121840",
  "appliesTo": [
    {
      "product": "Sonoma",
      "productUrl": "https://patchblox.com/security/product/macos/sonoma",
      "fixedVersion": "14.7.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-45490",
      "url": "https://patchblox.com/security/cve/CVE-2024-45490",
      "title": "libexpat: A remote attacker may cause an unexpected app termination or arbitrary code execution",
      "component": "libexpat",
      "impact": "A remote attacker may cause an unexpected app termination or arbitrary code execution",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01686,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54498",
      "url": "https://patchblox.com/security/cve/CVE-2024-54498",
      "title": "SharedFileList: An app may be able to break out of its sandbox",
      "component": "SharedFileList",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.01125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54557",
      "url": "https://patchblox.com/security/cve/CVE-2024-54557",
      "title": "SharedFileList: An attacker may gain access to protected parts of the file system",
      "component": "SharedFileList",
      "impact": "An attacker may gain access to protected parts of the file system",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54529",
      "url": "https://patchblox.com/security/cve/CVE-2024-54529",
      "title": "Audio: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "component": "Audio",
      "impact": "An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44225",
      "url": "https://patchblox.com/security/cve/CVE-2024-44225",
      "title": "libxpc: An app may be able to gain elevated privileges",
      "component": "libxpc",
      "impact": "An app may be able to gain elevated privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44291",
      "url": "https://patchblox.com/security/cve/CVE-2024-44291",
      "title": "Foundation: A malicious app may be able to gain root privileges",
      "component": "Software Update",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00297,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44245",
      "url": "https://patchblox.com/security/cve/CVE-2024-44245",
      "title": "Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54509",
      "url": "https://patchblox.com/security/cve/CVE-2024-54509",
      "title": "ASP TCP: An app may be able to cause unexpected system termination or write kernel memory",
      "component": "ASP TCP",
      "impact": "An app may be able to cause unexpected system termination or write kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44224",
      "url": "https://patchblox.com/security/cve/CVE-2024-44224",
      "title": "StorageKit: A malicious app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54514",
      "url": "https://patchblox.com/security/cve/CVE-2024-54514",
      "title": "libxpc: An app may be able to break out of its sandbox",
      "component": "libxpc",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54528",
      "url": "https://patchblox.com/security/cve/CVE-2024-54528",
      "title": "SharedFileList: An app may be able to overwrite arbitrary files",
      "component": "SharedFileList",
      "impact": "An app may be able to overwrite arbitrary files",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54537",
      "url": "https://patchblox.com/security/cve/CVE-2024-54537",
      "title": "QuickTime Player: An app may be able to read and write files outside of its sandbox",
      "component": "QuickTime Player",
      "impact": "An app may be able to read and write files outside of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54468",
      "url": "https://patchblox.com/security/cve/CVE-2024-54468",
      "title": "Kernel: An app may be able to break out of its sandbox",
      "component": "Kernel",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54526",
      "url": "https://patchblox.com/security/cve/CVE-2024-54526",
      "title": "AppleMobileFileIntegrity: A malicious app may be able to access private information",
      "component": "AppleMobileFileIntegrity",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.03385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54486",
      "url": "https://patchblox.com/security/cve/CVE-2024-54486",
      "title": "FontParser: Processing a maliciously crafted font may result in the disclosure of process memory",
      "component": "FontParser",
      "impact": "Processing a maliciously crafted font may result in the disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01361,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44248",
      "url": "https://patchblox.com/security/cve/CVE-2024-44248",
      "title": "Screen Sharing Server: A user with screen sharing access may be able to view another user\u0027s screen",
      "component": "Screen Sharing Server",
      "impact": "A user with screen sharing access may be able to view another user\u0027s screen",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00795,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54494",
      "url": "https://patchblox.com/security/cve/CVE-2024-54494",
      "title": "Kernel: An attacker may be able to create a read-only memory mapping that can be written to",
      "component": "Kernel",
      "impact": "An attacker may be able to create a read-only memory mapping that can be written to",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.9,
      "epss": 0.00763,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54466",
      "url": "https://patchblox.com/security/cve/CVE-2024-54466",
      "title": "DiskArbitration: An encrypted volume may be accessed by a different user without prompting for the password",
      "component": "DiskArbitration",
      "impact": "An encrypted volume may be accessed by a different user without prompting for the password",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00713,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54478",
      "url": "https://patchblox.com/security/cve/CVE-2024-54478",
      "title": "ICU: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "ICU",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00627,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44220",
      "url": "https://patchblox.com/security/cve/CVE-2024-44220",
      "title": "AppleGraphicsControl: Parsing a maliciously crafted video file may lead to unexpected system termination",
      "component": "AppleGraphicsControl",
      "impact": "Parsing a maliciously crafted video file may lead to unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00596,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54488",
      "url": "https://patchblox.com/security/cve/CVE-2024-54488",
      "title": "Accounts: Photos in the Hidden Photos Album may be viewed without authentication",
      "component": "Accounts",
      "impact": "Photos in the Hidden Photos Album may be viewed without authentication",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00518,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54489",
      "url": "https://patchblox.com/security/cve/CVE-2024-54489",
      "title": "Disk Utility: Running a mount command may unexpectedly execute arbitrary code",
      "component": "Disk Utility",
      "impact": "Running a mount command may unexpectedly execute arbitrary code",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00371,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54500",
      "url": "https://patchblox.com/security/cve/CVE-2024-54500",
      "title": "ImageIO: Processing a maliciously crafted image may result in disclosure of process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may result in disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00315,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54501",
      "url": "https://patchblox.com/security/cve/CVE-2024-54501",
      "title": "SceneKit: Processing a maliciously crafted file may lead to a denial of service",
      "component": "SceneKit",
      "impact": "Processing a maliciously crafted file may lead to a denial of service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-45306",
      "url": "https://patchblox.com/security/cve/CVE-2024-45306",
      "title": "Vim: Processing a maliciously crafted file may lead to heap corruption",
      "component": "Vim",
      "impact": "Processing a maliciously crafted file may lead to heap corruption",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44300",
      "url": "https://patchblox.com/security/cve/CVE-2024-44300",
      "title": "Crash Reporter: An app may be able to access protected user data",
      "component": "Crash Reporter",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54527",
      "url": "https://patchblox.com/security/cve/CVE-2024-54527",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54474",
      "url": "https://patchblox.com/security/cve/CVE-2024-54474",
      "title": "PackageKit: An app may be able to access user-sensitive data",
      "component": "PackageKit",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44201",
      "url": "https://patchblox.com/security/cve/CVE-2024-44201",
      "title": "libarchive: Processing a malicious crafted file may lead to a denial-of-service",
      "component": "libarchive",
      "impact": "Processing a malicious crafted file may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54477",
      "url": "https://patchblox.com/security/cve/CVE-2024-54477",
      "title": "Apple Software Restore: An app may be able to access user-sensitive data",
      "component": "Apple Software Restore",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54495",
      "url": "https://patchblox.com/security/cve/CVE-2024-54495",
      "title": "Swift: An app may be able to modify protected parts of the file system",
      "component": "Swift",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0027,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54520",
      "url": "https://patchblox.com/security/cve/CVE-2024-54520",
      "title": "System Settings: An app may be able to overwrite arbitrary files",
      "component": "System Settings",
      "impact": "An app may be able to overwrite arbitrary files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54547",
      "url": "https://patchblox.com/security/cve/CVE-2024-54547",
      "title": "Dock: An app may be able to access protected user data",
      "component": "Dock",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54541",
      "url": "https://patchblox.com/security/cve/CVE-2024-54541",
      "title": "APFS: An app may be able to access user-sensitive data",
      "component": "APFS",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54539",
      "url": "https://patchblox.com/security/cve/CVE-2024-54539",
      "title": "WindowServer: An app may be able to capture keyboard events from the lock screen",
      "component": "WindowServer",
      "impact": "An app may be able to capture keyboard events from the lock screen",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54519",
      "url": "https://patchblox.com/security/cve/CVE-2024-54519",
      "title": "Find My: An app may be able to read sensitive location information",
      "component": "Find My",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54510",
      "url": "https://patchblox.com/security/cve/CVE-2024-54510",
      "title": "Kernel: An app may be able to leak sensitive kernel state",
      "component": "Kernel",
      "impact": "An app may be able to leak sensitive kernel state",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54475",
      "url": "https://patchblox.com/security/cve/CVE-2024-54475",
      "title": "System Settings: An app may be able to determine a user\u2019s current location",
      "component": "System Settings",
      "impact": "An app may be able to determine a user\u2019s current location",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54516",
      "url": "https://patchblox.com/security/cve/CVE-2024-54516",
      "title": "SharedFileList: An app may be able to approve a launch daemon without user consent",
      "component": "SharedFileList",
      "impact": "An app may be able to approve a launch daemon without user consent",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T01:44:33Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}