CVE-2025-24232 - This issue was addressed through improved state management

Back Back to CVE browser

CRITICAL

This issue was addressed through improved state management

Published Mar 31, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 1.12%

Description

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access arbitrary files.

Affected products

Vendor Apple Product macOS Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <13.7.5
- Version
  0
  Status
  affected
  Constraints
  <14.7.5
- Version
  0
  Status
  affected
  Constraints
  <15.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

macOS

n/a

Version	Status	Constraints
0	affected	<13.7.5
0	affected	<14.7.5
0	affected	<15.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (6)

http://seclists.org/fulldisclosure/2025/Apr/10
http://seclists.org/fulldisclosure/2025/Apr/8
http://seclists.org/fulldisclosure/2025/Apr/9
https://support.apple.com/en-us/122373
Vendor Advisory
https://support.apple.com/en-us/122374
Vendor Advisory
https://support.apple.com/en-us/122375
Vendor Advisory

Link	Providers	Tags
http://seclists.org/fulldisclosure/2025/Apr/10
http://seclists.org/fulldisclosure/2025/Apr/8
http://seclists.org/fulldisclosure/2025/Apr/9
https://support.apple.com/en-us/122373		Vendor Advisory
https://support.apple.com/en-us/122374		Vendor Advisory
https://support.apple.com/en-us/122375		Vendor Advisory