Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-24258

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Ventura 13.7.6, macOS Sonoma 14.7.6. An app may be able to gain root privileges.

Published

2025-05-12T22:15:20.350

Last Modified

2025-11-03T20:17:55.147

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-269

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	macos	< 13.7.6	Yes
Operating System	apple	macos	< 14.7.6	Yes
Operating System	apple	macos	< 15.4	Yes

References

https://support.apple.com/en-us/122373 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/122717 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/122718 Release Notes, Vendor Advisory ([email protected])
http://seclists.org/fulldisclosure/2025/May/8 (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2025/May/9 (af854a3a-2127-422b-91ae-364da2661108)