PT-2025-5276 · Apple · Apple Macos

CVE-2025-24096

·

Published

2025-01-27

·

Updated

2025-01-30

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.3
Description This issue was addressed through improved state management. A malicious app may be able to access arbitrary files. The problem is related to a lack of authorization, which could allow an attacker to disclose protected information.
Recommendations For versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-01382
CVE-2025-24096

Affected Products

Apple Macos