CVE-2025-24208

CVE-2025-24208 affects WebKitGTK (webkitgtk) where loading a malicious iframe may lead to a cross-site scripting (XSS) attack. Public advisories confirm the issue and list it among fixed CVEs in multiple distro advisories (e.g., Debian DSA-5899-1 and AlmaLinux/ALSA advisories) with remediation vi...

CVE-2025-24208

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack...

CVE-2025-24208

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack...

CVE-2025-24249

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to check the existence of an arbitrary path on the file system...

CVE-2025-24249

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to check the existence of an arbitrary path on the file system...

CVE-2025-24207

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent...

CVE-2025-24207

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent...

CVE-2025-24207

CVE-2025-24207 is a permissions issue in macOS where an app could enable iCloud storage features without user consent. The issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. CVSS v3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction, and ...

CVE-2025-30458

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox...

CVE-2025-30458

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox...

CVE-2025-30458

CVE-2025-30458 describes a permissions issue in macOS Sequoia that could allow an app to read files outside its sandbox. The fixed release is macOS Sequoia 15.4. The vulnerability is mitigated by additional restrictions implemented in that update. The provided documents confirm the issue and the ...

CVE-2025-24267

This CVE (CVE-2025-24267) describes a local permissions issue in macOS that could allow an app to gain root privileges. Affected products/versions are macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Root cause details are not fully disclosed in the provided documents beyond the...

CVE-2025-24267

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-24267

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-24181

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

CVE-2025-24181

CVE-2025-24181 is a permissions-related issue affecting macOS where an app could access protected user data. Public details indicate the vulnerability is mitigated by OS updates rather than vendor-supplied patches for applications. The fixed versions are macOS Ventura 13.7.5, macOS Sequoia 15.4, ...

CVE-2025-24181

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

CVE-2025-30465

A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5. A shortcut may be able to access files that are normally inaccessible to th...

CVE-2025-30465

CVE-2025-30465 is a permissions issue in Shortcuts where a shortcut could access files normally inaccessible. Root cause: insufficient validation allowed access to restricted files. Fixes are in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Impact: potential un...

CVE-2025-30465

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...