PT-2025-5281
CVE-2025-24103
·
Publicado
2025-01-27
·
Atualizado
2025-08-10
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 13.7.3
macOS versions prior to 14.7.3
macOS versions prior to 15.3
Description
The issue is related to insecure storage of confidential information in the MacOs operating system's Security component. It may allow an attacker to gain unauthorized access to protected information. This issue was addressed with improved validation of symlinks. An app may be able to access protected user data.
Recommendations
For macOS versions prior to 13.7.3, update to macOS Ventura 13.7.3 to resolve the issue.
For macOS versions prior to 14.7.3, update to macOS Sonoma 14.7.3 to resolve the issue.
For macOS versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾