CVE-2025-24178

Details

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

Affected Packages

macOS:14macOS

Fixed in:

14.7.5

macOS:15macOS

Fixed in:

15.4

References

WEBhttp://seclists.org/fulldisclosure/2025/Apr/10 WEBhttp://seclists.org/fulldisclosure/2025/Apr/11 WEBhttp://seclists.org/fulldisclosure/2025/Apr/13 WEBhttp://seclists.org/fulldisclosure/2025/Apr/4 WEBhttp://seclists.org/fulldisclosure/2025/Apr/5 WEBhttp://seclists.org/fulldisclosure/2025/Apr/8 WEBhttp://seclists.org/fulldisclosure/2025/Apr/9 WEBhttps://support.apple.com/en-us/122371 WEBhttps://support.apple.com/en-us/122372 WEBhttps://support.apple.com/en-us/122373 WEBhttps://support.apple.com/en-us/122374 WEBhttps://support.apple.com/en-us/122375 WEBhttps://support.apple.com/en-us/122377 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-24178

CVE-2025-24178

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline