CVE-2025-24150

Details

A privacy issue was addressed with improved handling of files. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Copying a URL from Web Inspector may lead to command injection.

Affected Packages

macOS:15macOS

Fixed in:

15.3

References

WEBhttp://seclists.org/fulldisclosure/2025/Jan/13 WEBhttp://seclists.org/fulldisclosure/2025/Jan/15 WEBhttp://seclists.org/fulldisclosure/2025/Jan/20 WEBhttps://lists.debian.org/debian-lts-announce/2025/02/msg00014.html WEBhttps://support.apple.com/en-us/122066 WEBhttps://support.apple.com/en-us/122068 WEBhttps://support.apple.com/en-us/122074 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-24150

CVE-2025-24150

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline