CVEvulnerability
CVE-2025-24108
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-862
Description
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data.
Affected configurations
• apple macos (< 15.3)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://support.apple.com/en-us/122068 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jan/15 seclists.org