CVE-2025-24238

Details

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges.

Affected Packages

macOS:14macOS

Fixed in:

14.7.5

macOS:15macOS

Fixed in:

15.4

References

WEBhttp://seclists.org/fulldisclosure/2025/Apr/10 WEBhttp://seclists.org/fulldisclosure/2025/Apr/11 WEBhttp://seclists.org/fulldisclosure/2025/Apr/13 WEBhttp://seclists.org/fulldisclosure/2025/Apr/4 WEBhttp://seclists.org/fulldisclosure/2025/Apr/8 WEBhttp://seclists.org/fulldisclosure/2025/Apr/9 WEBhttps://support.apple.com/en-us/122371 WEBhttps://support.apple.com/en-us/122373 WEBhttps://support.apple.com/en-us/122374 WEBhttps://support.apple.com/en-us/122375 WEBhttps://support.apple.com/en-us/122377 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-24238

CVE-2025-24238

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline