{
  "fix": "Ventura 13.7.7",
  "url": "https://patchblox.com/security/fix/macos/ventura-13.7.7",
  "summary": "Ventura 13.7.7, released July 29, 2025, fixes 42 CVEs in Ventura. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.",
  "platform": "macos",
  "type": "os-version",
  "title": "Ventura 13.7.7",
  "released": "2025-07-29T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-43186, rated Critical",
  "supported": false,
  "cveCount": 42,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01315,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/124151",
  "appliesTo": [
    {
      "product": "Ventura",
      "productUrl": "https://patchblox.com/security/product/macos/ventura",
      "fixedVersion": "13.7.7",
      "supported": false
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-43186",
      "url": "https://patchblox.com/security/cve/CVE-2025-43186",
      "title": "afclip: Parsing a file may lead to an unexpected app termination",
      "component": "afclip",
      "impact": "Parsing a file may lead to an unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31279",
      "url": "https://patchblox.com/security/cve/CVE-2025-31279",
      "title": "Find My: An app may be able to fingerprint the user",
      "component": "Find My",
      "impact": "An app may be able to fingerprint the user",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43209",
      "url": "https://patchblox.com/security/cve/CVE-2025-43209",
      "title": "ICU: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "ICU",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43220",
      "url": "https://patchblox.com/security/cve/CVE-2025-43220",
      "title": "copyfile: An app may be able to access protected user data",
      "component": "copyfile",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00886,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43261",
      "url": "https://patchblox.com/security/cve/CVE-2025-43261",
      "title": "File Bookmark: An app may be able to break out of its sandbox",
      "component": "File Bookmark",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00829,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43184",
      "url": "https://patchblox.com/security/cve/CVE-2025-43184",
      "title": "Shortcuts: A shortcut may be able to bypass sensitive Shortcuts app settings",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass sensitive Shortcuts app settings",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00818,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43222",
      "url": "https://patchblox.com/security/cve/CVE-2025-43222",
      "title": "CFNetwork: An attacker may be able to cause unexpected app termination",
      "component": "CFNetwork",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00799,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43193",
      "url": "https://patchblox.com/security/cve/CVE-2025-43193",
      "title": "SecurityAgent: An app may be able to cause a denial-of-service",
      "component": "SecurityAgent",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00795,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43194",
      "url": "https://patchblox.com/security/cve/CVE-2025-43194",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43199",
      "url": "https://patchblox.com/security/cve/CVE-2025-43199",
      "title": "Core Services: A malicious app may be able to gain root privileges",
      "component": "Core Services",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43232",
      "url": "https://patchblox.com/security/cve/CVE-2025-43232",
      "title": "PackageKit: An app may be able to bypass certain Privacy preferences",
      "component": "PackageKit",
      "impact": "An app may be able to bypass certain Privacy preferences",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43233",
      "url": "https://patchblox.com/security/cve/CVE-2025-43233",
      "title": "Security: A malicious app acting as a HTTPS proxy could get access to sensitive user data",
      "component": "Security",
      "impact": "A malicious app acting as a HTTPS proxy could get access to sensitive user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00767,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43243",
      "url": "https://patchblox.com/security/cve/CVE-2025-43243",
      "title": "Software Update: An app may be able to modify protected parts of the file system",
      "component": "Software Update",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00767,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43245",
      "url": "https://patchblox.com/security/cve/CVE-2025-43245",
      "title": "AppleMobileFileIntegrity: An app may be able to access protected user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43275",
      "url": "https://patchblox.com/security/cve/CVE-2025-43275",
      "title": "NetAuth: An app may be able to break out of its sandbox",
      "component": "NetAuth",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00629,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43244",
      "url": "https://patchblox.com/security/cve/CVE-2025-43244",
      "title": "AMD: An app may be able to cause unexpected system termination",
      "component": "AMD",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00602,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24224",
      "url": "https://patchblox.com/security/cve/CVE-2025-24224",
      "title": "Kernel: A remote attacker may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "A remote attacker may be able to cause unexpected system termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01315,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43223",
      "url": "https://patchblox.com/security/cve/CVE-2025-43223",
      "title": "CFNetwork: A non-privileged user may be able to modify restricted network settings",
      "component": "CFNetwork",
      "impact": "A non-privileged user may be able to modify restricted network settings",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43196",
      "url": "https://patchblox.com/security/cve/CVE-2025-43196",
      "title": "libxpc: An app may be able to gain root privileges",
      "component": "libxpc",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43239",
      "url": "https://patchblox.com/security/cve/CVE-2025-43239",
      "title": "sips: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "sips",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24119",
      "url": "https://patchblox.com/security/cve/CVE-2025-24119",
      "title": "Finder: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "component": "Finder",
      "impact": "An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43187",
      "url": "https://patchblox.com/security/cve/CVE-2025-43187",
      "title": "Disk Images: Running an hdiutil command may unexpectedly execute arbitrary code",
      "component": "Disk Images",
      "impact": "Running an hdiutil command may unexpectedly execute arbitrary code",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43249",
      "url": "https://patchblox.com/security/cve/CVE-2025-43249",
      "title": "AppleMobileFileIntegrity: An app may be able to gain root privileges",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43270",
      "url": "https://patchblox.com/security/cve/CVE-2025-43270",
      "title": "Notes: An app may gain unauthorized access to Local Network",
      "component": "Notes",
      "impact": "An app may gain unauthorized access to Local Network",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43254",
      "url": "https://patchblox.com/security/cve/CVE-2025-43254",
      "title": "file: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "file",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31243",
      "url": "https://patchblox.com/security/cve/CVE-2025-31243",
      "title": "AppleMobileFileIntegrity: An app may be able to gain root privileges",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00221,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43247",
      "url": "https://patchblox.com/security/cve/CVE-2025-43247",
      "title": "PackageKit: A malicious app with root privileges may be able to modify the contents of system files",
      "component": "PackageKit",
      "impact": "A malicious app with root privileges may be able to modify the contents of system files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43210",
      "url": "https://patchblox.com/security/cve/CVE-2025-43210",
      "title": "CoreMedia: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43259",
      "url": "https://patchblox.com/security/cve/CVE-2025-43259",
      "title": "WindowServer: An attacker with physical access to a locked device may be able to view sensitive user information",
      "component": "WindowServer",
      "impact": "An attacker with physical access to a locked device may be able to view sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.6,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43191",
      "url": "https://patchblox.com/security/cve/CVE-2025-43191",
      "title": "Admin Framework: An app may be able to cause a denial-of-service",
      "component": "Admin Framework",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43250",
      "url": "https://patchblox.com/security/cve/CVE-2025-43250",
      "title": "SharedFileList: An app may be able to break out of its sandbox",
      "component": "SharedFileList",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43206",
      "url": "https://patchblox.com/security/cve/CVE-2025-43206",
      "title": "System Settings: An app may be able to access protected user data",
      "component": "System Settings",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43266",
      "url": "https://patchblox.com/security/cve/CVE-2025-43266",
      "title": "NSSpellChecker: An app may be able to break out of its sandbox",
      "component": "NSSpellChecker",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43195",
      "url": "https://patchblox.com/security/cve/CVE-2025-43195",
      "title": "CoreServices: An app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43225",
      "url": "https://patchblox.com/security/cve/CVE-2025-43225",
      "title": "Notes: An app may be able to access sensitive user data",
      "component": "Notes",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43241",
      "url": "https://patchblox.com/security/cve/CVE-2025-43241",
      "title": "SceneKit: An app may be able to read files outside of its sandbox",
      "component": "SceneKit",
      "impact": "An app may be able to read files outside of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43255",
      "url": "https://patchblox.com/security/cve/CVE-2025-43255",
      "title": "GPU Drivers: An app may be able to cause unexpected system termination",
      "component": "GPU Drivers",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43197",
      "url": "https://patchblox.com/security/cve/CVE-2025-43197",
      "title": "Single Sign-On: An app may be able to access sensitive user data",
      "component": "Single Sign-On",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43238",
      "url": "https://patchblox.com/security/cve/CVE-2025-43238",
      "title": "Xsan: An app may be able to cause unexpected system termination",
      "component": "Xsan",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43236",
      "url": "https://patchblox.com/security/cve/CVE-2025-43236",
      "title": "Power Management: An attacker may be able to cause unexpected app termination",
      "component": "Power Management",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43282",
      "url": "https://patchblox.com/security/cve/CVE-2025-43282",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43313",
      "url": "https://patchblox.com/security/cve/CVE-2025-43313",
      "title": "CoreServices: An app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}