CVE-2025-24135

CVE-2025-24135 affects macOS prior to Sequoia 15.3 and is associated with the System Extensions component. The issue arises from insufficient message validation, enabling an app to potentially gain elevated privileges on a local basis. Apple’s Sequoia 15.3 security content lists CVE-2025-24135 un...

CVE-2025-24174

CVE-2025-24174 affects macOS components and is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue is described as an access control/privacy bypass that could allow an app to bypass Privacy preferences, with the underlying root cause described as improved checks ...

CVE-2025-24174

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences...

CVE-2024-54530

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication...

CVE-2024-54530

CVE-2024-54530 affects Apple devices with iOS 18.2 and iPadOS 18.2 (and corresponding macOS/watchOS/visionOS updates) where the password autofill feature may fill in passwords after a failed authentication. The issue is addressed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2, and iP...

CVE-2024-54475

CVE-2024-54475 is a macOS privacy vulnerability where an app may determine the user’s current location via log data. Apple fixes: macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. Remediation: update to the affected versions. This entry is supported by Apple advisory and various secu...

CVE-2025-24158

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing web content may lead to a denial-of-service...

CVE-2025-24139

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Ventura 13.7.5. Parsing a maliciously crafted file may lead to an unexpected app termination...

CVE-2025-24139

CVE-2025-24139 affects macOS Ventura (and related macOS releases) where parsing a maliciously crafted file may cause an unexpected app termination. The initial description notes the issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3, indicating the root cause is l...

CVE-2024-54547

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...

CVE-2025-24103

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...

CVE-2025-24103

Technical details (affected product, component, root cause, impact or remediation) for CVE-2025-24103 are not provided in the connected documents; monitor for updates.

CVE-2025-24115

The CVE-2025-24115 issue is a path-handling vulnerability in macOS that arises from insufficient validation, enabling an app to read files outside its sandbox. Affected platforms are macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15.3. The root cause is a path handling issue address...

CVE-2025-24108

CVE-2025-24108 affects macOS Sequoia 15.3 where an access issue could allow an app to access protected user data. The NVD description notes the issue was addressed with additional sandbox restrictions and that the fix is included in macOS Sequoia 15.3. Apple’s security content for Sequoia 15.3 co...

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2024-54537

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to read and write files outside of its sandbox...

CVE-2024-54537

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to read and write files outside of its sandbox...

CVE-2025-24124

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24112

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination...