What macOS Ventura 13.7 Fixes
macOS Ventura 13.7, released September 16, 2024, fixes 31 vulnerabilities in 24 parts of the system, according to Apple's security advisory.
Apple does not say that any of them were exploited before the fix. That makes macOS Ventura 13.7 a routine security update: worth installing soon, not an emergency.
It has since been superseded: the newest security release for macOS Ventura is macOS Ventura 13.7.8, from August 20, 2025, which includes these fixes.
| What an attacker could do | Fixes |
|---|---|
| Elevated privileges or sandbox escape | 1 |
| Private data or protections bypassed | 17 |
| Spoofing | 1 |
| Crash or denial of service | 5 |
| Other | 7 |
Grouped by us from the impact Apple gives for each fix; the impact lines below are Apple's own.
Which Devices Get macOS Ventura 13.7
Apple lists macOS Ventura 13.7 for: macOS Ventura.
How to Install macOS Ventura 13.7
On the Mac, open System Settings → General → Software Update. Macs that cannot run the newest macOS are offered the update for their own version there.
Security fixes are cumulative: any later release for the same version includes these as well, so if you are already past macOS Ventura 13.7 there is nothing to do.
Every Fix in macOS Ventura 13.7
All 31 CVEs in Apple's advisory, the most serious kinds first. Each entry is the part of the system affected, Apple's description of the impact and the fix, and the CVE ID.
-
AppKit
An unprivileged app may be able to log keystrokes in other apps including those using secure input mode
A logic issue was addressed with improved restrictions.
CVE-2024-27886 -
Accounts
An app may be able to leak sensitive user information
The issue was addressed with improved checks.
CVE-2024-44129 -
App Intents
An app may be able to access sensitive data logged when a shortcut fails to launch another app
This issue was addressed with improved redaction of sensitive information.
CVE-2024-44182 -
AppleMobileFileIntegrity
An app may be able to access sensitive user data
The issue was addressed with additional code-signing restrictions.
CVE-2024-40847 -
AppleMobileFileIntegrity
An app may be able to bypass Privacy preferences
A downgrade issue was addressed with additional code-signing restrictions.
CVE-2024-40814 -
AppleMobileFileIntegrity
An app may be able to bypass Privacy preferences
This issue was addressed with improved checks.
CVE-2024-44164 -
AppleMobileFileIntegrity
An attacker may be able to read sensitive information
A downgrade issue was addressed with additional code-signing restrictions.
CVE-2024-40848 -
Automator
An Automator Quick Action workflow may be able to bypass Gatekeeper
This issue was addressed by adding an additional prompt for user consent.
CVE-2024-44128 -
Dock
An app may be able to access user-sensitive data
A privacy issue was addressed by removing sensitive data.
CVE-2024-44177 -
FileProvider
A local user may be able to leak sensitive user information
The issue was addressed with improved checks.
CVE-2024-54469 -
Game Center
An app may be able to access user-sensitive data
A file access issue was addressed with improved input validation.
CVE-2024-40850 -
Mail Accounts
An app may be able to access information about a user's contacts
A privacy issue was addressed with improved private data redaction for log entries.
CVE-2024-40791 -
Maps
An app may be able to read sensitive location information
An issue was addressed with improved handling of temporary files.
CVE-2024-44181 -
Sandbox
A malicious application may be able to access private information
The issue was addressed with improved checks.
CVE-2024-44163 -
Shortcuts
A shortcut may output sensitive user data without consent
This issue was addressed with improved redaction of sensitive information.
CVE-2024-44158 -
System Settings
An app may be able to access user-sensitive data
A privacy issue was addressed with improved private data redaction for log entries.
CVE-2024-44166 -
System Settings
An app may be able to read arbitrary files
A path handling issue was addressed with improved validation.
CVE-2024-44190 -
Transparency
An app may be able to access user-sensitive data
A permissions issue was addressed with additional restrictions.
CVE-2024-44184 -
Safari
Visiting a malicious website may lead to user interface spoofing
This issue was addressed through improved state management.
CVE-2024-40797 -
ImageIO
Processing an image may lead to a denial-of-service
An out-of-bounds access issue was addressed with improved bounds checking.
CVE-2024-44176 -
Intel Graphics Driver
Processing a maliciously crafted texture may lead to unexpected app termination
A buffer overflow issue was addressed with improved memory handling.
CVE-2024-44160 -
Intel Graphics Driver
Processing a maliciously crafted texture may lead to unexpected app termination
An out-of-bounds read was addressed with improved bounds checking.
CVE-2024-44161 -
IOSurfaceAccelerator
An app may be able to cause unexpected system termination
The issue was addressed with improved memory handling.
CVE-2024-44169 -
mDNSResponder
An app may be able to cause a denial-of-service
A logic error was addressed with improved error handling.
CVE-2024-44183 -
AppleMobileFileIntegrity
An app may be able to modify protected parts of the file system
A library injection issue was addressed with additional restrictions.
CVE-2024-44168 -
bless
An app may be able to modify protected parts of the file system
A permissions issue was addressed with additional restrictions.
CVE-2024-44151 -
Compression
Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files
A race condition was addressed with improved locking.
CVE-2024-27876 -
Kernel
Network traffic may leak outside a VPN tunnel
A logic issue was addressed with improved checks.
CVE-2024-44165 -
Notes
An app may be able to overwrite arbitrary files
This issue was addressed by removing the vulnerable code.
CVE-2024-44167 -
PackageKit
An app may be able to modify protected parts of the file system
This issue was addressed with improved validation of symlinks.
CVE-2024-44178 -
Shortcuts
An app may be able to observe data displayed to the user by Shortcuts
A privacy issue was addressed with improved handling of temporary files.
CVE-2024-40844
macOS Ventura Security Release History
macOS Ventura 13.7 in context: the security releases Apple has published for macOS Ventura, newest first, with the number of fixes each carried.
| Release | Released | Fixes |
|---|---|---|
| macOS Ventura 13.7.5 | March 31, 2025 | 108 |
| macOS Ventura 13.7.4 | February 10, 2025 | 1 Exploited |
| macOS Ventura 13.7.3 | January 27, 2025 | 38 |
| macOS Ventura 13.7.2 | December 11, 2024 | 33 |
| macOS Ventura 13.7.1 | October 28, 2024 | 49 |
| macOS Ventura 13.7 | September 16, 2024 | 31 |
| macOS Ventura 13.6.8 | July 29, 2024 | 46 |
| macOS Ventura 13.6.7 | May 13, 2024 | 22 Exploited |
| macOS Ventura 13.6.6 | March 25, 2024 | 1 |
| macOS Ventura 13.6.5 | March 7, 2024 | 32 Exploited |
| macOS Ventura 13.6.4 | January 22, 2024 | 13 Exploited |
The Same Fixes Elsewhere
Apple ships most fixes to every platform that shares the code, and to older versions still under support. These releases close at least one of the same CVEs:
Frequently Asked Questions
What does macOS Ventura 13.7 fix?
31 security vulnerabilities in 24 parts of the system, from Apple's advisory of September 16, 2024.
Was anything fixed in macOS Ventura 13.7 exploited?
Apple does not say so for any of the 31 fixes.
Which devices can install macOS Ventura 13.7?
macOS Ventura.
Is macOS Ventura 13.7 the latest security update?
No. macOS Ventura 13.7.8, from August 20, 2025, is newer and includes these fixes.
Source: About the security content of macOS Ventura 13.7, Apple. Rechecked automatically while Apple is still adding entries.