CVE-2025-24277

Details

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

Affected Packages

macOS:14macOS

Fixed in:

14.7.5

macOS:15macOS

Fixed in:

15.4

References

WEBhttp://seclists.org/fulldisclosure/2025/Apr/10 WEBhttp://seclists.org/fulldisclosure/2025/Apr/8 WEBhttp://seclists.org/fulldisclosure/2025/Apr/9 WEBhttps://support.apple.com/en-us/122373 WEBhttps://support.apple.com/en-us/122374 WEBhttps://support.apple.com/en-us/122375 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-24277

CVE-2025-24277

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline