About the security content of macOS Sonoma 14.2 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot15 Oct 2026, 21:07 UTC

Linked CVEs50

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2023-38546This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met
CVE-2023-38545This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake
CVE-2020-19190Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
CVE-2020-19189Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
CVE-2020-19188Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
CVE-2020-19187Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
CVE-2020-19186Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
CVE-2020-19185Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
CVE-2023-43010The issue was addressed with improved memory handling
CVE-2023-42896An issue was addressed with improved handling of temporary files
CVE-2023-38039curl — Allocation of Resources Without Limits or Throttling
CVE-2023-45866n/a — Improper Authentication
CVE-2023-42974A race condition was addressed with improved state handling
CVE-2023-42947A path handling issue was addressed with improved validation
CVE-2023-42936This issue was addressed with improved redaction of sensitive information
CVE-2023-42932A logic issue was addressed with improved checks
CVE-2023-42931The issue was addressed with improved checks
CVE-2023-42930This issue was addressed with improved checks
CVE-2023-42926Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42924A logic issue was addressed with improved checks
CVE-2023-42922This issue was addressed with improved redaction of sensitive information
CVE-2023-42919A privacy issue was addressed with improved private data redaction for log entries
CVE-2023-42914The issue was addressed with improved memory handling
CVE-2023-42913This issue was addressed through improved state management
CVE-2023-42912Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42911Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42910Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42909Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42908Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42907Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42906Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42905Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42904Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42903Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42902Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42901Multiple memory corruption issues were addressed with improved input validation
CVE-2023-42900The issue was addressed with improved checks
CVE-2023-42899The issue was addressed with improved memory handling
CVE-2023-42898The issue was addressed with improved memory handling
CVE-2023-42894This issue was addressed with improved redaction of sensitive information
CVE-2023-42893A permissions issue was addressed by removing vulnerable code and adding additional checks
CVE-2023-42892A local attacker may be able to elevate their privileges
CVE-2023-42891An authentication issue was addressed with improved state management
CVE-2023-42886An out-of-bounds read was addressed with improved bounds checking
CVE-2023-42884This issue was addressed with improved redaction of sensitive information
CVE-2023-42882The issue was addressed with improved memory handling
CVE-2023-42881The issue was addressed with improved memory handling
CVE-2023-42874This issue was addressed with improved state management
CVE-2023-40390A privacy issue was addressed by moving sensitive data to a protected location
CVE-2023-42937A privacy issue was addressed with improved private data redaction for log entries

Source and provenance

Original title: About the security content of macOS Sonoma 14.2 - Apple Support. Captured 15 Oct 2026, 21:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗