{
  "fix": "Sonoma 14.7",
  "url": "https://patchblox.com/security/fix/macos/sonoma-14.7",
  "summary": "Sonoma 14.7, released September 16, 2024, fixes 37 CVEs in Sonoma. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sonoma 14.7",
  "released": "2024-09-16T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2024-44165, high severity",
  "supported": true,
  "cveCount": 37,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.07939,
  "maxCvss": 8.1,
  "vendorAdvisory": "https://support.apple.com/en-us/121247",
  "appliesTo": [
    {
      "product": "Sonoma",
      "productUrl": "https://patchblox.com/security/product/macos/sonoma",
      "fixedVersion": "14.7",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-44165",
      "url": "https://patchblox.com/security/cve/CVE-2024-44165",
      "title": "Kernel: Network traffic may leak outside a VPN tunnel",
      "component": "Kernel",
      "impact": "Network traffic may leak outside a VPN tunnel",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00784,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40848",
      "url": "https://patchblox.com/security/cve/CVE-2024-40848",
      "title": "AppleMobileFileIntegrity: An attacker may be able to read sensitive information",
      "component": "AppleMobileFileIntegrity",
      "impact": "An attacker may be able to read sensitive information",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00709,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44167",
      "url": "https://patchblox.com/security/cve/CVE-2024-44167",
      "title": "Notes: An app may be able to overwrite arbitrary files",
      "component": "Notes",
      "impact": "An app may be able to overwrite arbitrary files",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.1,
      "epss": 0.00626,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27876",
      "url": "https://patchblox.com/security/cve/CVE-2024-27876",
      "title": "Compression: Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files",
      "component": "Compression",
      "impact": "Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.1,
      "epss": 0.00492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44160",
      "url": "https://patchblox.com/security/cve/CVE-2024-44160",
      "title": "Intel Graphics Driver: Processing a maliciously crafted texture may lead to unexpected app termination",
      "component": "Intel Graphics Driver",
      "impact": "Processing a maliciously crafted texture may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40846",
      "url": "https://patchblox.com/security/cve/CVE-2024-40846",
      "title": "AppleGraphicsControl: Processing a maliciously crafted video file may lead to unexpected app termination",
      "component": "AppleGraphicsControl",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0047,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40841",
      "url": "https://patchblox.com/security/cve/CVE-2024-40841",
      "title": "AppleVA: Processing a maliciously crafted video file may lead to unexpected app termination",
      "component": "AppleVA",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00317,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44126",
      "url": "https://patchblox.com/security/cve/CVE-2024-44126",
      "title": "ARKit: Processing a maliciously crafted file may lead to heap corruption",
      "component": "ARKit",
      "impact": "Processing a maliciously crafted file may lead to heap corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44164",
      "url": "https://patchblox.com/security/cve/CVE-2024-44164",
      "title": "AppleMobileFileIntegrity: An app may be able to bypass Privacy preferences",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44176",
      "url": "https://patchblox.com/security/cve/CVE-2024-44176",
      "title": "ImageIO: Processing an image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing an image may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.07939,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44151",
      "url": "https://patchblox.com/security/cve/CVE-2024-44151",
      "title": "bless: An app may be able to modify protected parts of the file system",
      "component": "bless",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00487,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40797",
      "url": "https://patchblox.com/security/cve/CVE-2024-40797",
      "title": "Safari: Visiting a malicious website may lead to user interface spoofing",
      "component": "Safari",
      "impact": "Visiting a malicious website may lead to user interface spoofing",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.1,
      "epss": 0.00487,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44154",
      "url": "https://patchblox.com/security/cve/CVE-2024-44154",
      "title": "AppleGraphicsControl: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "AppleGraphicsControl",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40850",
      "url": "https://patchblox.com/security/cve/CVE-2024-40850",
      "title": "Game Center: An app may be able to access user-sensitive data",
      "component": "Game Center",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27880",
      "url": "https://patchblox.com/security/cve/CVE-2024-27880",
      "title": "ImageIO: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44161",
      "url": "https://patchblox.com/security/cve/CVE-2024-44161",
      "title": "Intel Graphics Driver: Processing a maliciously crafted texture may lead to unexpected app termination",
      "component": "Intel Graphics Driver",
      "impact": "Processing a maliciously crafted texture may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44183",
      "url": "https://patchblox.com/security/cve/CVE-2024-44183",
      "title": "mDNSResponder: An app may be able to cause a denial-of-service",
      "component": "mDNSResponder",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44178",
      "url": "https://patchblox.com/security/cve/CVE-2024-44178",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44153",
      "url": "https://patchblox.com/security/cve/CVE-2024-44153",
      "title": "Accounts: An app may be able to access user-sensitive data",
      "component": "Accounts",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00248,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44168",
      "url": "https://patchblox.com/security/cve/CVE-2024-44168",
      "title": "AppleMobileFileIntegrity: An app may be able to modify protected parts of the file system",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44190",
      "url": "https://patchblox.com/security/cve/CVE-2024-44190",
      "title": "System Settings: An app may be able to read arbitrary files",
      "component": "System Settings",
      "impact": "An app may be able to read arbitrary files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40791",
      "url": "https://patchblox.com/security/cve/CVE-2024-40791",
      "title": "Mail Accounts: An app may be able to access information about a user\u0027s contacts",
      "component": "Mail Accounts",
      "impact": "An app may be able to access information about a user\u0027s contacts",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00244,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44158",
      "url": "https://patchblox.com/security/cve/CVE-2024-44158",
      "title": "Shortcuts: A shortcut may output sensitive user data without consent",
      "component": "Shortcuts",
      "impact": "A shortcut may output sensitive user data without consent",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40860",
      "url": "https://patchblox.com/security/cve/CVE-2024-40860",
      "title": "sudo: An app may be able to modify protected parts of the file system",
      "component": "sudo",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44125",
      "url": "https://patchblox.com/security/cve/CVE-2024-44125",
      "title": "Sandbox: A malicious application may be able to leak sensitive user information",
      "component": "Sandbox",
      "impact": "A malicious application may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44163",
      "url": "https://patchblox.com/security/cve/CVE-2024-44163",
      "title": "Sandbox: A malicious application may be able to access private information",
      "component": "Sandbox",
      "impact": "A malicious application may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44128",
      "url": "https://patchblox.com/security/cve/CVE-2024-44128",
      "title": "Automator: An Automator Quick Action workflow may be able to bypass Gatekeeper",
      "component": "Automator",
      "impact": "An Automator Quick Action workflow may be able to bypass Gatekeeper",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54469",
      "url": "https://patchblox.com/security/cve/CVE-2024-54469",
      "title": "FileProvider: A local user may be able to leak sensitive user information",
      "component": "FileProvider",
      "impact": "A local user may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40844",
      "url": "https://patchblox.com/security/cve/CVE-2024-40844",
      "title": "Shortcuts: An app may be able to observe data displayed to the user by Shortcuts",
      "component": "Shortcuts",
      "impact": "An app may be able to observe data displayed to the user by Shortcuts",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40847",
      "url": "https://patchblox.com/security/cve/CVE-2024-40847",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40801",
      "url": "https://patchblox.com/security/cve/CVE-2024-40801",
      "title": "Security Initialization: An app may be able to access protected user data",
      "component": "Security Initialization",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44135",
      "url": "https://patchblox.com/security/cve/CVE-2024-44135",
      "title": "AppSandbox: An app may be able to access protected files within an App Sandbox container",
      "component": "AppSandbox",
      "impact": "An app may be able to access protected files within an App Sandbox container",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44166",
      "url": "https://patchblox.com/security/cve/CVE-2024-44166",
      "title": "System Settings: An app may be able to access user-sensitive data",
      "component": "System Settings",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44177",
      "url": "https://patchblox.com/security/cve/CVE-2024-44177",
      "title": "Dock: An app may be able to access user-sensitive data",
      "component": "Dock",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44181",
      "url": "https://patchblox.com/security/cve/CVE-2024-44181",
      "title": "Maps: An app may be able to read sensitive location information",
      "component": "Maps",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44182",
      "url": "https://patchblox.com/security/cve/CVE-2024-44182",
      "title": "App Intents: An app may be able to access sensitive data logged when a shortcut fails to launch another app",
      "component": "App Intents",
      "impact": "An app may be able to access sensitive data logged when a shortcut fails to launch another app",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44184",
      "url": "https://patchblox.com/security/cve/CVE-2024-44184",
      "title": "Transparency: An app may be able to access user-sensitive data",
      "component": "Transparency",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}