deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-24178
Published: 2025-03-31
Description: This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24180
Published: 2025-03-31
Description: The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.
CVSS Score: 8.1 (HIGH)
CWE: CWE-601
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122376
CVE: CVE-2025-24181
Published: 2025-03-31
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24182
Published: 2025-03-31
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122376
CVE: CVE-2025-24190
Published: 2025-03-31
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24191
Published: 2025-03-31
Description: The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24192
Published: 2025-03-31
Description: A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. Visiting a website may leak sensitive data.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122378
CVE: CVE-2025-24193
Published: 2025-03-31
Description: This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos.
CVSS Score: 2.4 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/122371; http://seclists.org/fulldisclosure/2025/Apr/4
CVE: CVE-2025-24194
Published: 2025-03-31
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may result in the disclosure of process memory.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122376
CVE: CVE-2025-24195
Published: 2025-03-31
Description: An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24196
Published: 2025-03-31
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24198
Published: 2025-03-31
Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker with physical access may be able to use Siri to access sensitive user data.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24199
Published: 2025-03-31
Description: An uncontrolled format string issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24202
Published: 2025-03-31
Description: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/4
CVE: CVE-2025-24203
Published: 2025-03-31
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.
CVSS Score: 5.0 (MEDIUM)
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24204
Published: 2025-03-31
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24205
Published: 2025-03-31
Description: An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24207
Published: 2025-03-31
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24208
Published: 2025-03-31
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122379; http://seclists.org/fulldisclosure/2025/Apr/2
CVE: CVE-2025-24209
Published: 2025-03-31
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24210
Published: 2025-03-31
Description: A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Parsing an image may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-783
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24211
Published: 2025-03-31
Description: This issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24212
Published: 2025-03-31
Description: This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox.
CVSS Score: 6.3 (MEDIUM)
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24213
Published: 2025-03-31
Description: This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/en-us/122404; https://support.apple.com/en-us/122405; https://support.apple.com/en-us/122716
CVE: CVE-2025-24214
Published: 2025-03-31
Description: A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122376
CVE: CVE-2025-24215
Published: 2025-03-31
Description: The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374
CVE: CVE-2025-24216
Published: 2025-03-31
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119, CWE-508
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24217
Published: 2025-03-31
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122376
CVE: CVE-2025-24218
Published: 2025-03-31
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. An app may be able to access information about a user's contacts.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24221
Published: 2025-03-31
Description: This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122378
CVE: CVE-2025-24226
Published: 2025-03-31
Description: The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/122380; http://seclists.org/fulldisclosure/2025/Apr/3
CVE: CVE-2025-24228
Published: 2025-03-31
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24229
Published: 2025-03-31
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A sandboxed app may be able to access sensitive user data.
CVSS Score: 7.4 (HIGH)
CWE: CWE-284
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24230
Published: 2025-03-31
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Playing a malicious audio file may lead to an unexpected app termination.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24231
Published: 2025-03-31
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24232
Published: 2025-03-31
Description: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access arbitrary files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24233
Published: 2025-03-31
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to read or write to protected files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24234
Published: 2025-03-31
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24235
Published: 2025-03-31
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A remote attacker may be able to cause unexpected app termination or heap corruption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24236
Published: 2025-03-31
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24237
Published: 2025-03-31
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24238
Published: 2025-03-31
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374
CVE: CVE-2025-24239
Published: 2025-03-31
Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24240
Published: 2025-03-31
Description: A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24241
Published: 2025-03-31
Description: A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to trick a user into copying sensitive data to the pasteboard.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24242
Published: 2025-03-31
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root privileges may be able to access private information.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24243
Published: 2025-03-31
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24244
Published: 2025-03-31
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-24245
Published: 2025-03-31
Description: This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24246
Published: 2025-03-31
Description: An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24247
Published: 2025-03-31
Description: A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker may be able to cause unexpected app termination.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24248
Published: 2025-03-31
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to enumerate devices that have signed into the user's Apple Account.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/122373; http://seclists.org/fulldisclosure/2025/Apr/8
CVE: CVE-2025-24249
Published: 2025-03-31
Description: A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to check the existence of an arbitrary path on the file system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375
CVE: CVE-2025-24250
Published: 2025-03-31
Description: This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://support.apple.com/en-us/122373; https://support.apple.com/en-us/122374; https://support.apple.com/en-us/122375