deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-0734
Published: 2025-01-27
Description: A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the function getBeanName of the component Whitelist. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20, CWE-502, CWE-502
References: https://gist.github.com/GSBP0/3c1b0f9dbdd2a48b8f52330cfbbc279b; https://vuldb.com/?ctiid.293512; https://vuldb.com/?id.293512
CVE: CVE-2024-48841
Published: 2025-01-27
Description: Network access can be used to execute arbitrary code with elevated privileges. 





This
issue affects FLXEON 9.3.4 and older.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108470A5684&LanguageCode=en&DocumentPartId=PDF&Action=Launch
CVE: CVE-2025-0751
Published: 2025-01-27
Description: A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/991; https://github.com/user-attachments/files/18434657/seeds.zip; https://vuldb.com/?ctiid.293517
CVE: CVE-2025-0753
Published: 2025-01-27
Description: A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/991; https://github.com/user-attachments/files/18434657/seeds.zip; https://vuldb.com/?ctiid.293518
CVE: CVE-2024-37526
Published: 2025-01-27
Description: IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-497
References: https://www.ibm.com/support/pages/node/7173774
CVE: CVE-2024-44172
Published: 2025-01-27
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access contacts.
CVSS Score: 3.3 (LOW)
CWE: CWE-863
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2024-54468
Published: 2025-01-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to break out of its sandbox.
CVSS Score: 8.2 (HIGH)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54475
Published: 2025-01-27
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to determine a user’s current location.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54478
Published: 2025-01-27
Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Sequoia 15.2, macOS Sonoma 14.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840
CVE: CVE-2024-54488
Published: 2025-01-27
Description: A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Photos in the Hidden Photos Album may be viewed without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54497
Published: 2025-01-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Sequoia 15.2, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing web content may lead to a denial-of-service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54499
Published: 2025-01-27
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54507
Published: 2025-01-27
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An attacker with user privileges may be able to read kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-843, CWE-125
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839
CVE: CVE-2024-54509
Published: 2025-01-27
Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/122069
CVE: CVE-2024-54512
Published: 2025-01-27
Description: The issue was addressed by removing the relevant flags. This issue is fixed in iOS 18.2 and iPadOS 18.2, watchOS 11.2. A system binary could be used to fingerprint a user's Apple Account.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121843
CVE: CVE-2024-54516
Published: 2025-01-27
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to approve a launch daemon without user consent.
CVSS Score: 3.3 (LOW)
CWE: CWE-281
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840
CVE: CVE-2024-54517
Published: 2025-01-27
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54518
Published: 2025-01-27
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54519
Published: 2025-01-27
Description: The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840
CVE: CVE-2024-54520
Published: 2025-01-27
Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-787
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54522
Published: 2025-01-27
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54523
Published: 2025-01-27
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54530
Published: 2025-01-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54536
Published: 2025-01-27
Description: The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.2. An app may be able to edit NVRAM variables.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121839
CVE: CVE-2024-54537
Published: 2025-01-27
Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to read and write files outside of its sandbox.
CVSS Score: 8.2 (HIGH)
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54539
Published: 2025-01-27
Description: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to capture keyboard events from the lock screen.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54541
Published: 2025-01-27
Description: This issue was addressed through improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840
CVE: CVE-2024-54542
Published: 2025-01-27
Description: An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsing tabs may be accessed without authentication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54543
Published: 2025-01-27
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54547
Published: 2025-01-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54549
Published: 2025-01-27
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/121839
CVE: CVE-2024-54550
Published: 2025-01-27
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839
CVE: CVE-2024-54557
Published: 2025-01-27
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An attacker may gain access to protected parts of the file system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-281
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2025-24085
Published: 2025-01-27
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-416
References: https://support.apple.com/en-us/122066; https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122071
CVE: CVE-2025-24086
Published: 2025-01-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing an image may lead to a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://support.apple.com/en-us/122066; https://support.apple.com/en-us/122067; https://support.apple.com/en-us/122068
CVE: CVE-2025-24087
Published: 2025-01-27
Description: The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://support.apple.com/en-us/122068; http://seclists.org/fulldisclosure/2025/Jan/15
CVE: CVE-2025-24092
Published: 2025-01-27
Description: This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; http://seclists.org/fulldisclosure/2025/Jan/15
CVE: CVE-2025-24093
Published: 2025-01-27
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070; https://support.apple.com/en-us/122373
CVE: CVE-2025-24094
Published: 2025-01-27
Description: A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access user-sensitive data.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24096
Published: 2025-01-27
Description: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. A malicious app may be able to access arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/122068; http://seclists.org/fulldisclosure/2025/Jan/15
CVE: CVE-2025-24100
Published: 2025-01-27
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access information about a user's contacts.
CVSS Score: 3.3 (LOW)
CWE: CWE-1284
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24101
Published: 2025-01-27
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://support.apple.com/en-us/122068; http://seclists.org/fulldisclosure/2025/Jan/15
CVE: CVE-2025-24102
Published: 2025-01-27
Description: The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://support.apple.com/en-us/122067; https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069
CVE: CVE-2025-24103
Published: 2025-01-27
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24104
Published: 2025-01-27
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted backup file may lead to modification of protected system files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://support.apple.com/en-us/122066; https://support.apple.com/en-us/122067; http://seclists.org/fulldisclosure/2025/Jan/14
CVE: CVE-2025-24106
Published: 2025-01-27
Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to cause unexpected system termination.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24107
Published: 2025-01-27
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3. A malicious app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://support.apple.com/en-us/122066; https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122071
CVE: CVE-2025-24108
Published: 2025-01-27
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/122068; http://seclists.org/fulldisclosure/2025/Jan/15
CVE: CVE-2025-24109
Published: 2025-01-27
Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24112
Published: 2025-01-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; http://seclists.org/fulldisclosure/2025/Jan/15
CVE: CVE-2025-24113
Published: 2025-01-27
Description: The issue was addressed with improved UI. This issue is fixed in Safari 18.3, Safari 18.4, iOS 18.3 and iPadOS 18.3, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sequoia 15.4, visionOS 2.3, visionOS 2.4, watchOS 11.4. Visiting a malicious website may lead to user interface spoofing.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/122066; https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122073
CVE: CVE-2025-24114
Published: 2025-01-27
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24115
Published: 2025-01-27
Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24116
Published: 2025-01-27
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2025-24117
Published: 2025-01-27
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, visionOS 2.3, watchOS 11.3. An app may be able to fingerprint the user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://support.apple.com/en-us/122066; https://support.apple.com/en-us/122067; https://support.apple.com/en-us/122068