# Ventura 13.7.2 Ventura 13.7.2, released December 11, 2024, fixes 32 CVEs in Ventura. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/macos/ventura-13.7.2 - Platform: macOS - Released: Dec 11, 2024 - Priority: Urgent (Closes CVE-2024-45490, rated Critical) - CVEs: 32, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.apple.com/en-us/121842 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Ventura](https://patchblox.com/security/data/product/macos/ventura.md) | | 13.7.2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-45490](https://patchblox.com/security/data/cve/CVE-2024-45490.md) | Urgent | libexpat: A remote attacker may cause an unexpected app termination or arbitrary code execution | 9.8 | 0.0169 | | | [CVE-2024-54498](https://patchblox.com/security/data/cve/CVE-2024-54498.md) | High | SharedFileList: An app may be able to break out of its sandbox | 8.8 | 0.0113 | | | [CVE-2024-54557](https://patchblox.com/security/data/cve/CVE-2024-54557.md) | High | SharedFileList: An attacker may gain access to protected parts of the file system | 7.5 | 0.0053 | | | [CVE-2024-54529](https://patchblox.com/security/data/cve/CVE-2024-54529.md) | High | Audio: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges | 7.8 | 0.0033 | | | [CVE-2024-44225](https://patchblox.com/security/data/cve/CVE-2024-44225.md) | High | libxpc: An app may be able to gain elevated privileges | 7.8 | 0.0031 | | | [CVE-2024-44291](https://patchblox.com/security/data/cve/CVE-2024-44291.md) | High | Foundation: A malicious app may be able to gain root privileges | 7.8 | 0.0030 | | | [CVE-2024-44224](https://patchblox.com/security/data/cve/CVE-2024-44224.md) | High | StorageKit: A malicious app may be able to gain root privileges | 7.8 | 0.0025 | | | [CVE-2024-54514](https://patchblox.com/security/data/cve/CVE-2024-54514.md) | High | libxpc: An app may be able to break out of its sandbox | 8.2 | 0.0025 | | | [CVE-2024-54528](https://patchblox.com/security/data/cve/CVE-2024-54528.md) | High | SharedFileList: An app may be able to overwrite arbitrary files | 7.1 | 0.0023 | | | [CVE-2024-54537](https://patchblox.com/security/data/cve/CVE-2024-54537.md) | High | QuickTime Player: An app may be able to read and write files outside of its sandbox | 7.1 | 0.0020 | | | [CVE-2024-54468](https://patchblox.com/security/data/cve/CVE-2024-54468.md) | High | Kernel: An app may be able to break out of its sandbox | 8.2 | 0.0020 | | | [CVE-2024-54526](https://patchblox.com/security/data/cve/CVE-2024-54526.md) | Routine | AppleMobileFileIntegrity: A malicious app may be able to access private information | 5.5 | 0.0339 | | | [CVE-2024-54486](https://patchblox.com/security/data/cve/CVE-2024-54486.md) | Routine | FontParser: Processing a maliciously crafted font may result in the disclosure of process memory | 6.5 | 0.0136 | | | [CVE-2024-44248](https://patchblox.com/security/data/cve/CVE-2024-44248.md) | Routine | Screen Sharing Server: A user with screen sharing access may be able to view another user's screen | 6.5 | 0.0080 | | | [CVE-2024-54494](https://patchblox.com/security/data/cve/CVE-2024-54494.md) | Routine | Kernel: An attacker may be able to create a read-only memory mapping that can be written to | 5.9 | 0.0076 | | | [CVE-2024-54466](https://patchblox.com/security/data/cve/CVE-2024-54466.md) | Routine | DiskArbitration: An encrypted volume may be accessed by a different user without prompting for the password | 6.5 | 0.0071 | | | [CVE-2024-54488](https://patchblox.com/security/data/cve/CVE-2024-54488.md) | Routine | Accounts: Photos in the Hidden Photos Album may be viewed without authentication | 5.3 | 0.0052 | | | [CVE-2024-54489](https://patchblox.com/security/data/cve/CVE-2024-54489.md) | Routine | Disk Utility: Running a mount command may unexpectedly execute arbitrary code | 5.3 | 0.0037 | | | [CVE-2024-54500](https://patchblox.com/security/data/cve/CVE-2024-54500.md) | Routine | ImageIO: Processing a maliciously crafted image may result in disclosure of process memory | 5.5 | 0.0032 | | | [CVE-2024-54501](https://patchblox.com/security/data/cve/CVE-2024-54501.md) | Routine | SceneKit: Processing a maliciously crafted file may lead to a denial of service | 5.5 | 0.0031 | | | [CVE-2024-45306](https://patchblox.com/security/data/cve/CVE-2024-45306.md) | Routine | Vim: Processing a maliciously crafted file may lead to heap corruption | 5.5 | 0.0030 | | | [CVE-2024-44300](https://patchblox.com/security/data/cve/CVE-2024-44300.md) | Routine | Crash Reporter: An app may be able to access protected user data | 5.5 | 0.0028 | | | [CVE-2024-54527](https://patchblox.com/security/data/cve/CVE-2024-54527.md) | Routine | AppleMobileFileIntegrity: An app may be able to access sensitive user data | 5.5 | 0.0028 | | | [CVE-2024-54474](https://patchblox.com/security/data/cve/CVE-2024-54474.md) | Routine | PackageKit: An app may be able to access user-sensitive data | 5.5 | 0.0028 | | | [CVE-2024-44201](https://patchblox.com/security/data/cve/CVE-2024-44201.md) | Routine | libarchive: Processing a malicious crafted file may lead to a denial-of-service | 5.5 | 0.0028 | | | [CVE-2024-54477](https://patchblox.com/security/data/cve/CVE-2024-54477.md) | Routine | Apple Software Restore: An app may be able to access user-sensitive data | 5.5 | 0.0027 | | | [CVE-2024-54520](https://patchblox.com/security/data/cve/CVE-2024-54520.md) | Routine | System Settings: An app may be able to overwrite arbitrary files | 5.5 | 0.0023 | | | [CVE-2024-54547](https://patchblox.com/security/data/cve/CVE-2024-54547.md) | Routine | Dock: An app may be able to access protected user data | 5.5 | 0.0021 | | | [CVE-2024-54541](https://patchblox.com/security/data/cve/CVE-2024-54541.md) | Routine | APFS: An app may be able to access user-sensitive data | 5.5 | 0.0021 | | | [CVE-2024-54539](https://patchblox.com/security/data/cve/CVE-2024-54539.md) | Routine | WindowServer: An app may be able to capture keyboard events from the lock screen | 5.5 | 0.0020 | | | [CVE-2024-54510](https://patchblox.com/security/data/cve/CVE-2024-54510.md) | Routine | Kernel: An app may be able to leak sensitive kernel state | 5.1 | 0.0020 | | | [CVE-2024-54475](https://patchblox.com/security/data/cve/CVE-2024-54475.md) | Routine | System Settings: An app may be able to determine a user’s current location | 3.3 | 0.0020 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.