CVE-2025-24172

CVE-2025-24172 describes a permissions issue fixed by adding sandbox restrictions in macOS, with patches in macOS Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The advisory notes that Block All Remote Content may not apply for all mail previews. This entry is supported by the NVD record, which...

CVE-2025-31188

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences...

CVE-2025-31188

A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to bypass Privacy preferences...

CVE-2025-31188

CVE-2025-31188 describes a race condition that could allow an app to bypass Privacy preferences. The vulnerability is fixed in macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The description confirms a race condition addressed with additional validation; no exploitation details ar...

CVE-2025-24277

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges...

CVE-2025-24277

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-24261

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system...

CVE-2025-24261

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

CVE-2025-24148 affects macOS where the issue stems from improved handling of executable types, allowing a malicious JAR to bypass Gatekeeper checks. Active impact details in the provided data come from macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5 address the vulnerability. The C...

CVE-2025-24236

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data...

CVE-2025-24236

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data...

CVE-2025-24236

CVE-2025-24236 is an access issue in macOS CoreMedia where an app may access sensitive user data. The vulnerability was addressed with additional sandbox restrictions and is fixed in macOS Sequoia 15.4 and macOS Sonoma 14.7.5. The NVD entry describes the issue as an access issue corrected by sand...

CVE-2025-30449

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges...

CVE-2025-30449

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-30449

CVE-2025-30449 describes a permissions issue in macOS that could allow an app to gain root privileges. The vulnerability is addressed in macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The NVD entry states a fix in these versions; the attack vector is local and the base metrics in...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sequoia that originates from a malicious application with root privileges that may modify the contents of system files...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sequoia, which stems from a configuration issue that could cause an application to trick users into copying sensitive data to the...

PT-2025-13956 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A library injection issue was addressed with additional restrictions. This issue allows an app to potentially modify protected parts of the file system. Recommendations: For versions prior to 15.4,...

PT-2025-13875 · Apple · Safari +4

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: The issue arises from incorrect association of a download's origin. This was addressed through improved...