A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/122068 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/122069 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/122070 | Vendor Advisory Release Notes |
Configurations
Configuration 1 (hide)
|
History
24 Mar 2025, 14:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/122068 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/122069 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/122070 - Vendor Advisory, Release Notes | |
| First Time |
Apple
Apple macos |
|
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
28 Jan 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-276 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| Summary |
|
27 Jan 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-27 22:15
Updated : 2025-03-24 14:59
NVD link : CVE-2025-24176
Mitre link : CVE-2025-24176
CVE.ORG link : CVE-2025-24176
JSON object : View
Products Affected
apple
- macos
CWE
CWE-276
Incorrect Default Permissions