Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-20 Description: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24073
CVE ID: CVE-2025-24074 State: PUBLISHED Published: 2025-04-08T17:23:34.689Z Last Updated: 2025-06-04T17:52:48.631Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-20 Description: Improper input validation in Windows DWM
indows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-20 Description: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24074
CVE ID: CVE-2025-24075 State: PUBLISHED Published: 2025-03-11T16:59:15.872Z Last Updated: 2025-05-19T21:38:17.973Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-121 Description: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/upd
to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24075
CVE ID: CVE-2025-24076 State: PUBLISHED Published: 2025-03-11T16:59:16.458Z Last Updated: 2025-05-19T21:38:18.613Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-284 Description: Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.
to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24076
CVE ID: CVE-2025-24077 State: PUBLISHED Published: 2025-03-11T16:58:55.123Z Last Updated: 2025-05-19T21:37:55.597Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024 Problem Types: CWE-416 Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24077
CVE ID: CVE-2025-24078 State: PUBLISHED Published: 2025-03-11T16:58:55.964Z Last Updated: 2025-05-19T21:37:56.201Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24078
CVE ID: CVE-2025-24079 State: PUBLISHED Published: 2025-03-11T16:58:56.654Z Last Updated: 2025-05-19T21:37:56.800Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-2407
nalyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24079
CVE ID: CVE-2025-24080 State: PUBLISHED Published: 2025-03-11T16:58:57.259Z Last Updated: 2025-05-19T21:37:57.383Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24080
CVE ID: CVE-2025-24081 State: PUBLISHED Published: 2025-03-11T16:58:57.773Z Last Updated: 2025-05-19T21:37:57.859Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vul
de locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24081
CVE ID: CVE-2025-24082 State: PUBLISHED Published: 2025-03-11T16:58:58.359Z Last Updated: 2025-05-19T21:37:58.472Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vul
de locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24082
CVE ID: CVE-2025-24083 State: PUBLISHED Published: 2025-03-11T16:58:58.870Z Last Updated: 2025-05-19T21:37:59.077Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Office 2016 Problem Types: CWE-822 Description: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/C
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24083
CVE ID: CVE-2025-24084 State: PUBLISHED Published: 2025-03-11T16:59:17.033Z Last Updated: 2025-05-19T21:38:29.717Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2022, Windows 11 version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-822 Description: Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
ows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24084
CVE ID: CVE-2025-24085 State: PUBLISHED Published: 2025-01-27T21:45:46.555Z Last Updated: 2025-11-13T19:44:48.417Z Vendors: Apple Products: visionOS, tvOS, macOS, watchOS, iOS and iPadOS Problem Types: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2. Description: A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploi
application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122073 - https://support.apple.com/en-us/122072 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122071 - https://support.apple.com/en-us/122066
CVE ID: CVE-2025-24086 State: PUBLISHED Published: 2025-01-27T21:46:23.957Z Last Updated: 2025-11-03T21:00:40.532Z Vendors: Apple Products: macOS, visionOS, tvOS, iPadOS, watchOS, iOS and iPadOS Problem Types: Processing an image may lead to a denial-of-service Description: The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing an image may lead to a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.appl
A ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122073 - https://support.apple.com/en-us/122072 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122067 - https://support.apple.com/en-us/122071 - https://support.apple.com/en-us/122070 - https://support.apple.com/en-us/122066
CVE ID: CVE-2025-24087 State: PUBLISHED Published: 2025-01-27T21:46:07.288Z Last Updated: 2025-11-03T21:00:41.912Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122068
CVE ID: CVE-2025-24088 State: PUBLISHED Published: 2025-09-15T22:34:56.094Z Last Updated: 2025-11-03T18:08:50.834Z Vendors: Apple Products: macOS Problem Types: An app may be able to override MDM-enforced settings from profiles Description: The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125110
CVE ID: CVE-2025-24091 State: PUBLISHED Published: 2025-04-30T17:21:08.931Z Last Updated: 2025-04-30T20:22:27.632Z Vendors: Apple Products: iPadOS, iOS and iPadOS Problem Types: An app may be able to cause a denial-of-service Description: An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121838 - https://support.apple.com/en-us/122066
CVE ID: CVE-2025-24092 State: PUBLISHED Published: 2025-01-27T21:46:00.624Z Last Updated: 2025-11-03T21:00:44.689Z Vendors: Apple Products: macOS Problem Types: An app may be able to read sensitive location information Description: This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read sensitive location information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068
CVE ID: CVE-2025-24093 State: PUBLISHED Published: 2025-01-27T21:45:48.196Z Last Updated: 2025-11-03T21:00:48.846Z Vendors: Apple Products: macOS Problem Types: An app may be able to access removable volumes without user consent Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24094 State: PUBLISHED Published: 2025-01-27T21:45:32.661Z Last Updated: 2025-11-03T21:00:53.035Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24095 State: PUBLISHED Published: 2025-03-31T22:22:36.818Z Last Updated: 2025-11-03T21:00:55.812Z Vendors: Apple Products: iOS and iPadOS, visionOS Problem Types: An app may be able to bypass Privacy preferences Description: This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122378
CVE ID: CVE-2025-24096 State: PUBLISHED Published: 2025-01-27T21:46:37.289Z Last Updated: 2025-11-03T21:00:57.251Z Vendors: Apple Products: macOS Problem Types: A malicious app may be able to access arbitrary files Description: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. A malicious app may be able to access arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122068
CVE ID: CVE-2025-24097 State: PUBLISHED Published: 2025-03-31T22:24:00.602Z Last Updated: 2025-11-03T21:01:04.515Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS Problem Types: An app may be able to read arbitrary file metadata Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to read arbitrary file metadata. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.c
en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374
CVE ID: CVE-2025-24099 State: PUBLISHED Published: 2025-01-30T16:32:08.364Z Last Updated: 2025-01-30T21:25:20.132Z Vendors: Apple Products: macOS Problem Types: A local attacker may be able to elevate their privileges Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24100 State: PUBLISHED Published: 2025-01-27T21:46:23.128Z Last Updated: 2025-11-03T21:01:08.694Z Vendors: Apple Products: macOS Problem Types: An app may be able to access information about a user's contacts Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access information about a user's contacts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24101 State: PUBLISHED Published: 2025-01-27T21:46:08.935Z Last Updated: 2025-11-03T21:01:10.078Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122068
CVE ID: CVE-2025-24102 State: PUBLISHED Published: 2025-01-27T21:46:03.076Z Last Updated: 2025-11-03T21:01:15.628Z Vendors: Apple Products: macOS, iPadOS Problem Types: An app may be able to determine a user’s current location Description: The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122067 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24103 State: PUBLISHED Published: 2025-01-27T21:45:44.885Z Last Updated: 2025-11-03T21:01:19.834Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24104 State: PUBLISHED Published: 2025-01-27T21:45:35.220Z Last Updated: 2025-11-03T21:01:21.213Z Vendors: Apple Products: iPadOS, iOS and iPadOS Problem Types: Restoring a maliciously crafted backup file may lead to modification of protected system files Description: This issue was addressed with improved handling of symlinks. This issue is fixed in iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3. Restoring a maliciously crafted backup file may lead to modification of protected system files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122067 - https://support.apple.com/en-us/122066
CVE ID: CVE-2025-24106 State: PUBLISHED Published: 2025-01-27T21:46:35.615Z Last Updated: 2025-11-03T21:01:25.419Z Vendors: Apple Products: macOS Problem Types: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24107 State: PUBLISHED Published: 2025-01-27T21:46:31.426Z Last Updated: 2025-11-03T21:01:29.617Z Vendors: Apple Products: tvOS, macOS, watchOS, iOS and iPadOS Problem Types: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3 and iPadOS 18.3. A malicious app may be able to gain root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122072 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122071 - https://support.app
com/en-us/122072 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122071 - https://support.apple.com/en-us/122066
CVE ID: CVE-2025-24108 State: PUBLISHED Published: 2025-01-27T21:45:41.313Z Last Updated: 2025-11-03T21:01:31.007Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122068
CVE ID: CVE-2025-24109 State: PUBLISHED Published: 2025-01-27T21:45:25.051Z Last Updated: 2025-11-03T21:01:35.204Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122069 - https://support.apple.com/en-us/122068 - https://support.apple.com/en-us/122070
CVE ID: CVE-2025-24111 State: PUBLISHED Published: 2025-05-12T21:42:58.814Z Last Updated: 2025-11-03T19:43:12.187Z Vendors: Apple Products: visionOS, tvOS, macOS, iPadOS, watchOS, iOS and iPadOS Problem Types: An app may be able to cause unexpected system termination Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.3, visionOS 2.3, iPadOS 17.7.7, watchOS 11.3, macOS Sonoma 14.7.5, iOS 18.3 and iPadOS 18.3, tvOS 18.3, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/