Skip to content
Appaloosa Scout

macOS

macOS 14.7.7

Official advisory

52 CVEs fixed by this release.

Release date
2025-07-29
End of support
CVEs fixed
52
CISA KEV
0
Critical
0
High
0
NVD pending
51

CVEs fixed

CVE Severity
CVE-2025-7424

[Apple libxslt] Processing maliciously crafted web content may lead to memory corruption

MEDIUM 7.3
CVE-2025-24119

[Apple LaunchServices] An app may be able to execute arbitrary code out of its sandbox or with certain elevated privile…

N/A
CVE-2025-31243

[Apple AppleMobileFileIntegrity] An app may be able to gain root privileges

N/A
CVE-2025-31279

[Apple Find My] An app may be able to fingerprint the user

N/A
CVE-2025-43184

[Apple Shortcuts] A shortcut may be able to bypass sensitive Shortcuts app settings

N/A
CVE-2025-43186

[Apple afclip] Parsing a file may lead to an unexpected app termination

N/A
CVE-2025-43187

[Apple Disk Images] Running an hdiutil command may unexpectedly execute arbitrary code

N/A
CVE-2025-43189

[Apple WebContentFilter] A malicious app may be able to read kernel memory

N/A
CVE-2025-43191

[Apple Admin Framework] An app may be able to cause a denial-of-service

N/A
CVE-2025-43192

[Apple Managed Configuration] Account-driven User Enrollment may still be possible with Lockdown Mode turned on

N/A
CVE-2025-43193

[Apple SecurityAgent] An app may be able to cause a denial-of-service

N/A
CVE-2025-43194

[Apple PackageKit] An app may be able to modify protected parts of the file system

N/A
CVE-2025-43195

[Apple CoreServices] An app may be able to access sensitive user data

N/A
CVE-2025-43196

[Apple libxpc] An app may be able to gain root privileges

N/A
CVE-2025-43197

[Apple Single Sign-On] An app may be able to access sensitive user data

N/A
CVE-2025-43198

[Apple Dock] An app may be able to access protected user data

N/A
CVE-2025-43199

[Apple Core Services] A malicious app may be able to gain root privileges

N/A
CVE-2025-43206

[Apple System Settings] An app may be able to access protected user data

N/A
CVE-2025-43209

[Apple ICU] Processing maliciously crafted web content may lead to an unexpected Safari crash

N/A
CVE-2025-43210

[Apple CoreMedia] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

N/A
CVE-2025-43220

[Apple copyfile] An app may be able to access protected user data

N/A
CVE-2025-43222

[Apple CFNetwork] An attacker may be able to cause unexpected app termination

N/A
CVE-2025-43223

[Apple CFNetwork] A non-privileged user may be able to modify restricted network settings

N/A
CVE-2025-43225

[Apple Notes] An app may be able to access sensitive user data

N/A
CVE-2025-43226

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

N/A
CVE-2025-43232

[Apple PackageKit] An app may be able to bypass certain Privacy preferences

N/A
CVE-2025-43233

[Apple Security] A malicious app acting as a HTTPS proxy could get access to sensitive user data

N/A
CVE-2025-43236

[Apple Power Management] An attacker may be able to cause unexpected app termination

N/A
CVE-2025-43238

[Apple Xsan] An app may be able to cause unexpected system termination

N/A
CVE-2025-43239

[Apple sips] Processing a maliciously crafted file may lead to unexpected app termination

N/A
CVE-2025-43241

[Apple SceneKit] An app may be able to read files outside of its sandbox

N/A
CVE-2025-43243

[Apple Software Update] An app may be able to modify protected parts of the file system

N/A
CVE-2025-43244

[Apple AMD] An app may be able to cause unexpected system termination

N/A
CVE-2025-43245

[Apple AppleMobileFileIntegrity] An app may be able to access protected user data

N/A
CVE-2025-43246

[Apple Spotlight] An app may be able to access sensitive user data

N/A
CVE-2025-43247

[Apple PackageKit] A malicious app with root privileges may be able to modify the contents of system files

N/A
CVE-2025-43248

[Apple AppleMobileFileIntegrity] A malicious app may be able to gain root privileges

N/A
CVE-2025-43249

[Apple AppleMobileFileIntegrity] An app may be able to gain root privileges

N/A
CVE-2025-43250

[Apple SharedFileList] An app may be able to break out of its sandbox

N/A
CVE-2025-43253

[Apple AppleMobileFileIntegrity] A malicious app may be able to launch arbitrary binaries on a trusted device

N/A
CVE-2025-43254

[Apple file] Processing a maliciously crafted file may lead to unexpected app termination

N/A
CVE-2025-43255

[Apple GPU Drivers] An app may be able to cause unexpected system termination

N/A
CVE-2025-43256

[Apple StorageKit] An app may be able to gain root privileges

N/A
CVE-2025-43259

[Apple WindowServer] An attacker with physical access to a locked device may be able to view sensitive user information

N/A
CVE-2025-43260

[Apple PackageKit] An app may be able to hijack entitlements granted to other privileged apps

N/A
CVE-2025-43261

[Apple File Bookmark] An app may be able to break out of its sandbox

N/A
CVE-2025-43266

[Apple NSSpellChecker] An app may be able to break out of its sandbox

N/A
CVE-2025-43270

[Apple Notes] An app may gain unauthorized access to Local Network

N/A
CVE-2025-43275

[Apple NetAuth] An app may be able to break out of its sandbox

N/A
CVE-2025-43282

[Apple Kernel] An app may be able to cause unexpected system termination

N/A
CVE-2025-43284

[Apple GPU Drivers] An app may be able to cause unexpected system termination

N/A
CVE-2025-43313

[Apple CoreServices] An app may be able to access sensitive user data

N/A