CVE-2025-24274

Description

An input validation issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. A malicious app may be able to gain root privileges.

References

https://support.apple.com/en-us/122718

https://support.apple.com/en-us/122717

https://support.apple.com/en-us/122716

http://seclists.org/fulldisclosure/2025/May/9

http://seclists.org/fulldisclosure/2025/May/8

http://seclists.org/fulldisclosure/2025/May/7

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS