macOS · macOS update · October 28, 2024
Sonoma 14.7.1
Sonoma 14.7.1, released October 28, 2024, fixes 43 CVEs in Sonoma. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
43
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.3
Base score, 0 to 10
Highest EPSS
0.1141
96th percentile
Priority of the 43 CVEs
Patch now 0
Urgent 1
High 14
Routine 28
Applies to
| Product | Version |
|---|---|
| Sonoma | 14.7.1 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2024-44256 | Messages: An app may be able to break out of its sandbox | An app may be able to break out of its sandbox | 9.3 | 0.0025 | None reported |
| High | CVE-2024-54538 | Security: A remote attacker may be able to cause a denial-of-service | A remote attacker may be able to cause a denial-of-service | 7.5 | 0.0099 | None reported |
| High | CVE-2024-44213 | CUPS: An attacker in a privileged network position may be able to leak sensitive user information | An attacker in a privileged network position may be able to leak sensitive user information | 7.5 | 0.0075 | None reported |
| High | CVE-2024-44270 | AppleMobileFileIntegrity: A sandboxed process may be able to circumvent sandbox restrictions | A sandboxed process may be able to circumvent sandbox restrictions | 7.5 | 0.0065 | None reported |
| High | CVE-2024-44175 | Kernel: An app may be able to access sensitive user data | An app may be able to access sensitive user data | 7.5 | 0.0064 | None reported |
| High | CVE-2024-44265 | Game Controllers: An attacker with physical access can input Game Controller events to apps running on a locked device | An attacker with physical access can input Game Controller events to apps running on a locked device | 7.5 | 0.0063 | None reported |
| High | CVE-2024-44289 | Find My: An app may be able to read sensitive location information | An app may be able to read sensitive location information | 7.5 | 0.0063 | None reported |
| High | CVE-2024-44264 | SystemMigration: A malicious app may be able to create symlinks to protected regions of the disk | A malicious app may be able to create symlinks to protected regions of the disk | 7.5 | 0.0062 | None reported |
| High | CVE-2024-44196 | PackageKit: An app may be able to modify protected parts of the file system | An app may be able to modify protected parts of the file system | 7.5 | 0.0052 | None reported |
| High | CVE-2024-44255 | App Support: A malicious app may be able to run arbitrary shortcuts without user consent | A malicious app may be able to run arbitrary shortcuts without user consent | 8.4 | 0.0031 | None reported |
| High | CVE-2024-44218 | SceneKit: Processing a maliciously crafted file may lead to heap corruption | Processing a maliciously crafted file may lead to heap corruption | 7.8 | 0.0030 | None reported |
| High | CVE-2024-44159 | PackageKit: An app may be able to bypass Privacy preferences | An app may be able to bypass Privacy preferences | 7.1 | 0.0027 | None reported |
| High | CVE-2024-44122 | LaunchServices: An application may be able to break out of its sandbox | An application may be able to break out of its sandbox | 8.8 | 0.0026 | None reported |
| High | CVE-2024-44280 | AppleMobileFileIntegrity: An app may be able to modify protected parts of the file system | An app may be able to modify protected parts of the file system | 7.7 | 0.0024 | None reported |
| High | CVE-2024-44295 | CoreServicesUIAgent: An app may be able to modify protected parts of the file system | An app may be able to modify protected parts of the file system | 7.7 | 0.0024 | None reported |
| Routine | CVE-2024-44236 | sips: Processing a maliciously crafted file may lead to unexpected app termination | Processing a maliciously crafted file may lead to unexpected app termination | 6.5 | 0.1141 | None reported |
| Routine | CVE-2024-44197 | IOGPUFamily: An app may be able to cause unexpected system termination or corrupt kernel memory | An app may be able to cause unexpected system termination or corrupt kernel memory | 2.7 | 0.0101 | None reported |
| Routine | CVE-2024-44297 | ImageIO: Processing a maliciously crafted message may lead to a denial-of-service | Processing a maliciously crafted message may lead to a denial-of-service | 6.5 | 0.0085 | None reported |
| Routine | CVE-2024-44294 | PackageKit: An attacker with root privileges may be able to delete protected system files | An attacker with root privileges may be able to delete protected system files | 6.5 | 0.0085 | None reported |
| Routine | CVE-2024-44282 | Foundation: Parsing a file may lead to disclosure of user information | Parsing a file may lead to disclosure of user information | 6.5 | 0.0081 | None reported |
| Routine | CVE-2024-44284 | sips: Parsing a maliciously crafted file may lead to an unexpected app termination | Parsing a maliciously crafted file may lead to an unexpected app termination | 6.5 | 0.0058 | None reported |
| Routine | CVE-2024-44283 | sips: Parsing a maliciously crafted file may lead to an unexpected app termination | Parsing a maliciously crafted file may lead to an unexpected app termination | 6.5 | 0.0055 | None reported |
| Routine | CVE-2024-44240 | CoreText: Processing a maliciously crafted font may result in the disclosure of process memory | Processing a maliciously crafted font may result in the disclosure of process memory | 6.5 | 0.0053 | None reported |
| Routine | CVE-2024-44279 | sips: Parsing a file may lead to disclosure of user information | Parsing a file may lead to disclosure of user information | 6.5 | 0.0051 | None reported |
| Routine | CVE-2024-40854 | GPU Drivers: An app may be able to cause unexpected system termination | An app may be able to cause unexpected system termination | 6.5 | 0.0040 | None reported |
Showing 1 to 25 of 43
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.