Detections
Analytics

macOS 14.x < 14.7.7 Multiple Vulnerabilities (124150)

high Nessus Plugin ID 243002

Language:

Synopsis

The remote host is missing a macOS update that fixes multiple vulnerabilities

Description

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.7. It is, therefore, affected by multiple vulnerabilities:

 - A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior. (CVE-2025-7424)

 - An integer overflow was addressed with improved input validation. (CVE-2025-24119, CVE-2025-31243, CVE-2025-43184, CVE-2025-43186, CVE-2025-43187, CVE-2025-43191, CVE-2025-43193, CVE-2025-43194, CVE-2025-43195, CVE-2025-43196, CVE-2025-43197, CVE-2025-43198, CVE-2025-43199, CVE-2025-43206, CVE-2025-43210, CVE-2025-43220, CVE-2025-43222, CVE-2025-43223, CVE-2025-43225, CVE-2025-43226, CVE-2025-43232, CVE-2025-43233, CVE-2025-43236, CVE-2025-43238, CVE-2025-43239, CVE-2025-43241, CVE-2025-43243, CVE-2025-43244, CVE-2025-43245, CVE-2025-43246, CVE-2025-43247, CVE-2025-43248, CVE-2025-43249, CVE-2025-43250, CVE-2025-43253, CVE-2025-43254, CVE-2025-43255, CVE-2025-43256, CVE-2025-43259, CVE-2025-43260, CVE-2025-43261, CVE-2025-43266, CVE-2025-43270, CVE-2025-43275)

 - This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at (CVE-2025-31279, CVE-2025-43209)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

Solution

Upgrade to macOS 14.7.7 or later.

See Also

https://support.apple.com/en-us/124150

Plugin Details

Severity: High

ID: 243002

File Name: macos_124150.nasl

Version: 1.2

Type: local

Agent: macosx

Published: 7/29/2025

Updated: 8/1/2025

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.9

CVSS v2

Risk Factor: Medium

Base Score: 5.6

Temporal Score: 4.1

Vector: CVSS2#AV:L/AC:H/Au:N/C:N/I:C/A:C

CVSS Score Source: CVE-2025-7424

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:apple:macos:14.0, cpe:/o:apple:mac_os_x:14.0

Exploit Ease: No known exploits are available

Patch Publication Date: 7/29/2025

Vulnerability Publication Date: 7/10/2025

Reference Information

CVE: CVE-2025-24119, CVE-2025-31243, CVE-2025-31279, CVE-2025-43184, CVE-2025-43186, CVE-2025-43187, CVE-2025-43189, CVE-2025-43191, CVE-2025-43192, CVE-2025-43193, CVE-2025-43194, CVE-2025-43195, CVE-2025-43196, CVE-2025-43197, CVE-2025-43198, CVE-2025-43199, CVE-2025-43206, CVE-2025-43209, CVE-2025-43210, CVE-2025-43220, CVE-2025-43222, CVE-2025-43223, CVE-2025-43225, CVE-2025-43226, CVE-2025-43232, CVE-2025-43233, CVE-2025-43236, CVE-2025-43238, CVE-2025-43239, CVE-2025-43241, CVE-2025-43243, CVE-2025-43244, CVE-2025-43245, CVE-2025-43246, CVE-2025-43247, CVE-2025-43248, CVE-2025-43249, CVE-2025-43250, CVE-2025-43253, CVE-2025-43254, CVE-2025-43255, CVE-2025-43256, CVE-2025-43259, CVE-2025-43260, CVE-2025-43261, CVE-2025-43266, CVE-2025-43270, CVE-2025-43275, CVE-2025-7424

APPLE-SA: 124150

IAVA: 2025-A-0555