deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-58049
Published: 2025-08-28
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs store sensitive cookies unencrypted in job statuses. XWiki shouldn't store passwords in plain text, and it shouldn't be possible to gain access to plain text passwords by gaining access to, e.g., a backup of the data directory. This vulnerability has been patched in XWiki 16.4.8, 16.10.7, and 17.4.0-rc-1.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-212, CWE-257
References: https://github.com/xwiki/xwiki-platform/commit/60982ad0057b1701ed8297f28cad35d170686539; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9m7c-m33f-3429; https://jira.xwiki.org/browse/XWIKI-23151
CVE: CVE-2025-58059
Published: 2025-08-28
Description: Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to: running executables on the application host, inspecting and extracting data from the host environment or application properties, spring beans (application context, database pooling). The following conditions have to be met in order to perform this attack: the user must be logged in, have the admin role, and must have some knowledge about running scripts via a the Camunda/Operator engine. Version 12.16.0 and 13.1.2 have been patched. It is strongly advised to upgrade. If no scripting is needed in any of the processes, it could be possible to disable it altogether via the ProcessEngineConfiguration. However, this workaround could lead to unexpected side-effects.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-200
References: https://github.com/valtimo-platform/valtimo-backend-libraries/commit/45eb60b0b2df5964fb9917295d0dceb1fff8dd85; https://github.com/valtimo-platform/valtimo-backend-libraries/security/advisories/GHSA-w48j-pp7j-fj55
CVE: CVE-2025-9195
Published: 2025-08-28
Description: Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.solidigm.com/support-page/support-security.html
CVE: CVE-2025-9575
Published: 2025-08-28
Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function cgiMain of the file /cgi-bin/upload.cgi. Executing manipulation of the argument filename can lead to os command injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.md; https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.md#poc; https://vuldb.com/?ctiid.321689
CVE: CVE-2025-9576
Published: 2025-08-28
Description: A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688. Impacted is an unknown function of the file /etc/shadow of the component Administrative Interface. The manipulation leads to use of default credentials. An attack has to be approached locally. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.5 (LOW)
CWE: CWE-1392
References: https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md; https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md#steps-to-reproduce; https://vuldb.com/?ctiid.321690
CVE: CVE-2025-57215
Published: 2025-08-28
Description: Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://plaid-knot-11b.notion.site/Heap-based-Buffer-Overflow-in-function-get_parentControl_list_Info-via-deviceId-parameter-Remote-at-23eb3e9cce328014a639f619bc14ed90; https://www.tenda.com.cn
CVE: CVE-2025-57219
Published: 2025-08-28
Description: Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components via a crafted request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://plaid-knot-11b.notion.site/Unauthenticated-Remote-Access-to-ate-Debug-Interface-via-Improper-Access-Controls-in-Tenda-AC10-V4-23fb3e9cce328050a479e44a8c217a72?source=copy_link
CVE: CVE-2025-57220
Published: 2025-08-28
Description: An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://plaid-knot-11b.notion.site/Unauthenticated-Remote-Root-Shell-via-Input-Validation-Flaw-in-ate-Service-on-Tenda-AC10-V4-0-23fb3e9cce32804d93aad7e79a82a7aa?source=copy_link
CVE: CVE-2025-9577
Published: 2025-08-28
Description: A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.
CVSS Score: 2.5 (LOW)
CWE: CWE-1392
References: https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md; https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md#steps-to-reproduce; https://vuldb.com/?ctiid.321691
CVE: CVE-2025-9579
Published: 2025-08-28
Description: A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78, CWE-78
References: https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-1/B-Link%20X26%20V1.2.8.md; https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-1/B-Link%20X26%20V1.2.8.md#3-poc; https://vuldb.com/?ctiid.321692
CVE: CVE-2025-9580
Published: 2025-08-28
Description: A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78, CWE-78
References: https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-2/B-Link%20X26%20V1.2.8.md; https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-2/B-Link%20X26%20V1.2.8.md#3poc; https://vuldb.com/?ctiid.321693
CVE: CVE-2025-9581
Published: 2025-08-28
Description: A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-77
References: https://github.com/ZZ2266/.github.io/tree/main/COMFAST/N1V2/multi_pppoe; https://vuldb.com/?ctiid.321694; https://vuldb.com/?id.321694
CVE: CVE-2025-6203
Published: 2025-08-28
Description: A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become unresponsive. This vulnerability, CVE-2025-6203, is fixed in Vault Community Edition 1.20.3 and Vault Enterprise 1.20.3, 1.19.9, 1.18.14, and 1.16.25.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://discuss.hashicorp.com/t/hcsec-2025-24-vault-denial-of-service-though-complex-json-payloads/76393
CVE: CVE-2025-9582
Published: 2025-08-28
Description: A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-77
References: https://github.com/ZZ2266/.github.io/tree/main/COMFAST/N1V2/ntp_timezone; https://vuldb.com/?ctiid.321695; https://vuldb.com/?id.321695
CVE: CVE-2025-9583
Published: 2025-08-28
Description: A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/ZZ2266/.github.io/tree/main/COMFAST/N1V2/ping_config; https://vuldb.com/?ctiid.321696; https://vuldb.com/?id.321696
CVE: CVE-2025-9584
Published: 2025-08-28
Description: A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/ZZ2266/.github.io/blob/main/COMFAST/N1V2/update_interface_png/readme.md; https://vuldb.com/?ctiid.321697; https://vuldb.com/?id.321697
CVE: CVE-2025-9585
Published: 2025-08-28
Description: A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/ZZ2266/.github.io/blob/main/COMFAST/N1V2/wifilith_delete_pic_file/readme.md; https://vuldb.com/?ctiid.321698; https://vuldb.com/?id.321698
CVE: CVE-2025-9586
Published: 2025-08-28
Description: A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/ZZ2266/.github.io/blob/main/COMFAST/N1V2/wireless_device_dissoc/readme.md; https://vuldb.com/?ctiid.321699; https://vuldb.com/?id.321699
CVE: CVE-2025-58058
Published: 2025-08-28
Description: xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2; https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9
CVE: CVE-2025-58061
Published: 2025-08-28
Description: OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes. Prior to version 0.10.0, persistent volume data is world readable and that would allow non-privileged users to access sensitive data such as databases of k8s workload. The rawfile-localpv storage class creates persistent volume data under /var/csi/rawfile/ on Kubernetes hosts by default. However, the directory and data in it are world-readable. It allows non-privileged users to access the whole persistent volume data, and those can include sensitive information such as a whole database if the Kubernetes tenants are running MySQL or PostgreSQL in a container so it could lead to a database breach. This issue has been patched in version 0.10.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/openebs/rawfile-localpv/security/advisories/GHSA-wh95-vw4r-xwx4
CVE: CVE-2025-9589
Published: 2025-08-28
Description: A vulnerability was determined in Cudy WR1200EA 2.3.7-20[PII_REDACTED]10. Affected is an unknown function of the file /etc/shadow. Executing manipulation can lead to use of default password. The attack needs to be launched locally. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.5 (LOW)
CWE: CWE-1393
References: https://github.com/ZZ2266/.github.io/tree/main/Cudy; https://github.com/ZZ2266/.github.io/tree/main/Cudy#steps-to-reproduce; https://vuldb.com/?ctiid.321761
CVE: CVE-2025-9590
Published: 2025-08-28
Description: A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813. Affected by this vulnerability is an unknown functionality. The manipulation of the argument gohome leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/Lee0568/pocccc/blob/main/poc.md; https://github.com/Lee0568/pocccc/blob/main/poc.md#vulnerability-analysis; https://vuldb.com/?ctiid.321762
CVE: CVE-2025-9591
Published: 2025-08-28
Description: A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/SaaS5SaaS/CVE/issues/3; https://vuldb.com/?ctiid.321765; https://vuldb.com/?id.321765
CVE: CVE-2025-9592
Published: 2025-08-28
Description: A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/bill_info.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/pjy2004/cve/issues/3; https://itsourcecode.com/; https://vuldb.com/?ctiid.321766
CVE: CVE-2025-58062
Published: 2025-08-28
Description: LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server, attackers could provision a malicious authorization server endpoint to silently achieve an OS command injection attack in the open() invocation, leading to client system compromise. This issue has been patched in version 0.1.12.
CWE: CWE-78
References: https://drive.google.com/file/d/1lSqFkc412aX6a_fjmNfzXsJKE7b8jPqD/view?usp=sharing; https://github.com/LSTM-Kirigaya/openmcp-client/commit/9c3799d6ffae8d0cdfab25a53af75e1afc85f6c3; https://github.com/LSTM-Kirigaya/openmcp-client/security/advisories/GHSA-43m4-p3rv-c4v8
CVE: CVE-2025-9593
Published: 2025-08-28
Description: A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/pjy2004/cve/issues/2; https://itsourcecode.com/; https://vuldb.com/?ctiid.321767
CVE: CVE-2025-9594
Published: 2025-08-28
Description: A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complain_info.php. The manipulation of the argument vid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/pjy2004/cve/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.321768
CVE: CVE-2025-48979
Published: 2025-08-29
Description: An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.
CVSS Score: 3.4 (LOW)
CWE: CWE-77
References: https://community.ui.com/releases/Security-Advisory-Bulletin-053/b0c4aa38-90aa-412d-b5b9-6395e057d822
CVE: CVE-2025-9595
Published: 2025-08-29
Description: A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has been made public and could be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/57; https://vuldb.com/?ctiid.321769
CVE: CVE-2025-9596
Published: 2025-08-29
Description: A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/55; https://itsourcecode.com/; https://vuldb.com/?ctiid.321770
CVE: CVE-2025-9597
Published: 2025-08-29
Description: A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/rented_all_info.php. Such manipulation of the argument uid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/54; https://itsourcecode.com/; https://vuldb.com/?ctiid.321771
CVE: CVE-2025-9598
Published: 2025-08-29
Description: A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/53; https://itsourcecode.com/; https://vuldb.com/?ctiid.321772
CVE: CVE-2024-44271
Published: 2025-08-29
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/121839
CVE: CVE-2024-54554
Published: 2025-08-29
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/121564
CVE: CVE-2024-54568
Published: 2025-08-29
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/121839
CVE: CVE-2025-40927
Published: 2025-08-29
Description: CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw
This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions.

Although some validation exists, it can be bypassed using URL-encoded values, allowing an attacker to inject untrusted content into the response via query parameters.



As a result, an attacker can inject a line break (e.g. %0A) into the parameter value, causing the server to split the HTTP response and inject arbitrary headers or even an HTML/JavaScript body, leading to reflected cross-site scripting (XSS), open redirect or other attacks.

The issue documented in CVE-2010-4410 https://www.cve.org/CVERecord?id=CVE-2010-4410 is related but the fix was incomplete.

Impact

By injecting %0A (newline) into a query string parameter, an attacker can:

  *  Break the current HTTP header
  *  Inject a new header or entire body
  *  Deliver a script payload that is reflected in the server’s response
That can lead to the following attacks:

  *  reflected XSS
  *  open redirect
  *  cache poisoning
  *  header manipulation
CVSS Score: 7.3 (HIGH)
CWE: CWE-113
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2320; https://datatracker.ietf.org/doc/html/rfc7230#section-3; https://metacpan.org/release/MANWAR/CGI-Simple-1.281/diff/MANWAR/CGI-Simple-1.282/lib/CGI/Simple.pm
CVE: CVE-2025-43187
Published: 2025-08-29
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/124149; https://support.apple.com/en-us/124150; https://support.apple.com/en-us/124151
CVE: CVE-2025-43255
Published: 2025-08-29
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.apple.com/en-us/124149; https://support.apple.com/en-us/124150; https://support.apple.com/en-us/124151
CVE: CVE-2025-43268
Published: 2025-08-29
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://support.apple.com/en-us/124149; http://seclists.org/fulldisclosure/2025/Jul/32