csaf_ncscnl - ncsc-2025-0102

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft meerdere kwetsbaarheden verholpen in macOS (Specifiek voor Ventura 13.7.5, Sequoia 15.4 en Sonoma 14.7.5).",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten onder andere problemen met ongeautoriseerde toegang tot gevoelige gebruikersdata, logboekregistratie-issues, en kwetsbaarheden die het mogelijk maakten voor applicaties om root-rechten te verkrijgen. Deze kwetsbaarheden konden worden misbruikt door kwaadwillenden om toegang te krijgen tot gevoelige informatie of om systeeminstabiliteit te veroorzaken.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
        "title": "CWE-94"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Incorrect Default Permissions",
        "title": "CWE-276"
      },
      {
        "category": "general",
        "text": "Comparison Using Wrong Factors",
        "title": "CWE-1025"
      },
      {
        "category": "general",
        "text": "Incorrect Comparison",
        "title": "CWE-697"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "CWE-275",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Missing Authorization",
        "title": "CWE-862"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://support.apple.com/en-us/122375"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://support.apple.com/en-us/122374"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://support.apple.com/en-us/122373"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple macOS",
    "tracking": {
      "current_release_date": "2025-04-01T08:41:09.934597Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0102",
      "initial_release_date": "2025-04-01T08:41:09.934597Z",
      "revision_history": [
        {
          "date": "2025-04-01T08:41:09.934597Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:apple/13.7",
                    "product": {
                      "name": "vers:apple/13.7",
                      "product_id": "CSAFPID-1251566"
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:unknown/\u003e=13.0|\u003c13.7.3",
                    "product": {
                      "name": "vers:unknown/\u003e=13.0|\u003c13.7.3",
                      "product_id": "CSAFPID-1916435"
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:apple/14.7",
                    "product": {
                      "name": "vers:apple/14.7",
                      "product_id": "CSAFPID-1251568"
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:apple/15.3",
                    "product": {
                      "name": "vers:apple/15.3",
                      "product_id": "CSAFPID-1915328"
                    }
                  }
                ],
                "category": "product_name",
                "name": "macOS"
              }
            ],
            "category": "product_family",
            "name": "Apple"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/13.7",
                "product": {
                  "name": "vers:unknown/13.7",
                  "product_id": "CSAFPID-1136191"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/13.7.1",
                "product": {
                  "name": "vers:unknown/13.7.1",
                  "product_id": "CSAFPID-1245683",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:apple:macos:13.7.1:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/13.7.2",
                "product": {
                  "name": "vers:unknown/13.7.2",
                  "product_id": "CSAFPID-1496144"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/13.7.3",
                "product": {
                  "name": "vers:unknown/13.7.3",
                  "product_id": "CSAFPID-2406261"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/ventura \u003c13.7.3",
                "product": {
                  "name": "vers:unknown/ventura \u003c13.7.3",
                  "product_id": "CSAFPID-1904383"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c13.7",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c13.7",
                  "product_id": "CSAFPID-1416488"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c13.7.3",
                "product": {
                  "name": "vers:unknown/\u003c13.7.3",
                  "product_id": "CSAFPID-1923307",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/14.7",
                "product": {
                  "name": "vers:unknown/14.7",
                  "product_id": "CSAFPID-1136190"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/14.7.1",
                "product": {
                  "name": "vers:unknown/14.7.1",
                  "product_id": "CSAFPID-1245685",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:apple:macos:14.7.1:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/14.7.2",
                "product": {
                  "name": "vers:unknown/14.7.2",
                  "product_id": "CSAFPID-1496142"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/14.7.3",
                "product": {
                  "name": "vers:unknown/14.7.3",
                  "product_id": "CSAFPID-2406265"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c14.7.3",
                "product": {
                  "name": "vers:unknown/\u003c14.7.3",
                  "product_id": "CSAFPID-1923306",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/sonoma \u003c14.7.3",
                "product": {
                  "name": "vers:unknown/sonoma \u003c14.7.3",
                  "product_id": "CSAFPID-1904384"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.0",
                "product": {
                  "name": "vers:unknown/15.0",
                  "product_id": "CSAFPID-1245684",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:apple:macos:15.0:-:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.1",
                "product": {
                  "name": "vers:unknown/15.1",
                  "product_id": "CSAFPID-1436077"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.1.1",
                "product": {
                  "name": "vers:unknown/15.1.1",
                  "product_id": "CSAFPID-1463431"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.2",
                "product": {
                  "name": "vers:unknown/15.2",
                  "product_id": "CSAFPID-1904042"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.3",
                "product": {
                  "name": "vers:unknown/15.3",
                  "product_id": "CSAFPID-2492950"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c15.4",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c15.4",
                  "product_id": "CSAFPID-2470109"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/13.7.3",
                "product": {
                  "name": "vers:apple/13.7.3",
                  "product_id": "CSAFPID-1902955"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Ventura"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-27043",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-27043",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-27043.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2023-27043"
    },
    {
      "cve": "CVE-2024-9681",
      "cwe": {
        "id": "CWE-1025",
        "name": "Comparison Using Wrong Factors"
      },
      "notes": [
        {
          "category": "other",
          "text": "Comparison Using Wrong Factors",
          "title": "CWE-1025"
        },
        {
          "category": "other",
          "text": "Incorrect Comparison",
          "title": "CWE-697"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-9681",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-9681.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2024-9681"
    },
    {
      "cve": "CVE-2024-40864",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40864",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40864.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2024-40864"
    },
    {
      "cve": "CVE-2024-48958",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-48958",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-48958.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2024-48958"
    },
    {
      "cve": "CVE-2024-54533",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54533",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54533.json"
        }
      ],
      "title": "CVE-2024-54533"
    },
    {
      "cve": "CVE-2024-56171",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-56171",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-56171.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2024-56171"
    },
    {
      "cve": "CVE-2025-24085",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24085",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24085.json"
        }
      ],
      "title": "CVE-2025-24085"
    },
    {
      "cve": "CVE-2025-24093",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24093",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24093.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24093"
    },
    {
      "cve": "CVE-2025-24097",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24097",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24097.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24097"
    },
    {
      "cve": "CVE-2025-24113",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24113",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24113.json"
        }
      ],
      "title": "CVE-2025-24113"
    },
    {
      "cve": "CVE-2025-24139",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24139",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24139.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24139"
    },
    {
      "cve": "CVE-2025-24148",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24148",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24148.json"
        }
      ],
      "title": "CVE-2025-24148"
    },
    {
      "cve": "CVE-2025-24157",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24157",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24157.json"
        }
      ],
      "title": "CVE-2025-24157"
    },
    {
      "cve": "CVE-2025-24163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24163",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24163.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24163"
    },
    {
      "cve": "CVE-2025-24164",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24164",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24164.json"
        }
      ],
      "title": "CVE-2025-24164"
    },
    {
      "cve": "CVE-2025-24167",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24167",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24167.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24167"
    },
    {
      "cve": "CVE-2025-24170",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24170",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24170.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24170"
    },
    {
      "cve": "CVE-2025-24172",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24172",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24172.json"
        }
      ],
      "title": "CVE-2025-24172"
    },
    {
      "cve": "CVE-2025-24173",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24173",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24173.json"
        }
      ],
      "title": "CVE-2025-24173"
    },
    {
      "cve": "CVE-2025-24178",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24178",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24178.json"
        }
      ],
      "title": "CVE-2025-24178"
    },
    {
      "cve": "CVE-2025-24180",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24180",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24180.json"
        }
      ],
      "title": "CVE-2025-24180"
    },
    {
      "cve": "CVE-2025-24181",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24181",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24181.json"
        }
      ],
      "title": "CVE-2025-24181"
    },
    {
      "cve": "CVE-2025-24182",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24182.json"
        }
      ],
      "title": "CVE-2025-24182"
    },
    {
      "cve": "CVE-2025-24190",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24190",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24190.json"
        }
      ],
      "title": "CVE-2025-24190"
    },
    {
      "cve": "CVE-2025-24191",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24191",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24191.json"
        }
      ],
      "title": "CVE-2025-24191"
    },
    {
      "cve": "CVE-2025-24192",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24192.json"
        }
      ],
      "title": "CVE-2025-24192"
    },
    {
      "cve": "CVE-2025-24194",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24194",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24194.json"
        }
      ],
      "title": "CVE-2025-24194"
    },
    {
      "cve": "CVE-2025-24195",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24195",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24195.json"
        }
      ],
      "title": "CVE-2025-24195"
    },
    {
      "cve": "CVE-2025-24196",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24196",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24196.json"
        }
      ],
      "title": "CVE-2025-24196"
    },
    {
      "cve": "CVE-2025-24198",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24198",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24198.json"
        }
      ],
      "title": "CVE-2025-24198"
    },
    {
      "cve": "CVE-2025-24199",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24199",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24199.json"
        }
      ],
      "title": "CVE-2025-24199"
    },
    {
      "cve": "CVE-2025-24202",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24202",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24202.json"
        }
      ],
      "title": "CVE-2025-24202"
    },
    {
      "cve": "CVE-2025-24203",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24203",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24203.json"
        }
      ],
      "title": "CVE-2025-24203"
    },
    {
      "cve": "CVE-2025-24204",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24204",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24204.json"
        }
      ],
      "title": "CVE-2025-24204"
    },
    {
      "cve": "CVE-2025-24205",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24205",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24205.json"
        }
      ],
      "title": "CVE-2025-24205"
    },
    {
      "cve": "CVE-2025-24207",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24207",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24207.json"
        }
      ],
      "title": "CVE-2025-24207"
    },
    {
      "cve": "CVE-2025-24209",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24209",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24209.json"
        }
      ],
      "title": "CVE-2025-24209"
    },
    {
      "cve": "CVE-2025-24210",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24210",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24210.json"
        }
      ],
      "title": "CVE-2025-24210"
    },
    {
      "cve": "CVE-2025-24211",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24211",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24211.json"
        }
      ],
      "title": "CVE-2025-24211"
    },
    {
      "cve": "CVE-2025-24212",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24212",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24212.json"
        }
      ],
      "title": "CVE-2025-24212"
    },
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24213",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24213.json"
        }
      ],
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24214",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24214",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24214.json"
        }
      ],
      "title": "CVE-2025-24214"
    },
    {
      "cve": "CVE-2025-24215",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24215",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24215.json"
        }
      ],
      "title": "CVE-2025-24215"
    },
    {
      "cve": "CVE-2025-24216",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24216",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24216.json"
        }
      ],
      "title": "CVE-2025-24216"
    },
    {
      "cve": "CVE-2025-24217",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24217",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24217.json"
        }
      ],
      "title": "CVE-2025-24217"
    },
    {
      "cve": "CVE-2025-24218",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24218",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24218.json"
        }
      ],
      "title": "CVE-2025-24218"
    },
    {
      "cve": "CVE-2025-24228",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24228",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24228.json"
        }
      ],
      "title": "CVE-2025-24228"
    },
    {
      "cve": "CVE-2025-24229",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24229",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24229.json"
        }
      ],
      "title": "CVE-2025-24229"
    },
    {
      "cve": "CVE-2025-24230",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24230",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24230.json"
        }
      ],
      "title": "CVE-2025-24230"
    },
    {
      "cve": "CVE-2025-24231",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24231",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24231.json"
        }
      ],
      "title": "CVE-2025-24231"
    },
    {
      "cve": "CVE-2025-24232",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24232",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24232.json"
        }
      ],
      "title": "CVE-2025-24232"
    },
    {
      "cve": "CVE-2025-24233",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24233",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24233.json"
        }
      ],
      "title": "CVE-2025-24233"
    },
    {
      "cve": "CVE-2025-24234",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24234",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24234.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24234"
    },
    {
      "cve": "CVE-2025-24235",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24235",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24235.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24235"
    },
    {
      "cve": "CVE-2025-24236",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24236",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24236.json"
        }
      ],
      "title": "CVE-2025-24236"
    },
    {
      "cve": "CVE-2025-24237",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24237",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24237.json"
        }
      ],
      "title": "CVE-2025-24237"
    },
    {
      "cve": "CVE-2025-24238",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24238",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24238.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24238"
    },
    {
      "cve": "CVE-2025-24239",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24239",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24239.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24239"
    },
    {
      "cve": "CVE-2025-24240",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24240",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24240.json"
        }
      ],
      "title": "CVE-2025-24240"
    },
    {
      "cve": "CVE-2025-24241",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24241",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24241.json"
        }
      ],
      "title": "CVE-2025-24241"
    },
    {
      "cve": "CVE-2025-24242",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24242",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24242.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24242"
    },
    {
      "cve": "CVE-2025-24243",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
          "title": "CWE-94"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24243",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24243.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24243"
    },
    {
      "cve": "CVE-2025-24244",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24244",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24244.json"
        }
      ],
      "title": "CVE-2025-24244"
    },
    {
      "cve": "CVE-2025-24245",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24245",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24245.json"
        }
      ],
      "title": "CVE-2025-24245"
    },
    {
      "cve": "CVE-2025-24246",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24246",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24246.json"
        }
      ],
      "title": "CVE-2025-24246"
    },
    {
      "cve": "CVE-2025-24247",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24247",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24247.json"
        }
      ],
      "title": "CVE-2025-24247"
    },
    {
      "cve": "CVE-2025-24248",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24248",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24248.json"
        }
      ],
      "title": "CVE-2025-24248"
    },
    {
      "cve": "CVE-2025-24249",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24249",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24249.json"
        }
      ],
      "title": "CVE-2025-24249"
    },
    {
      "cve": "CVE-2025-24250",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24250",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24250.json"
        }
      ],
      "title": "CVE-2025-24250"
    },
    {
      "cve": "CVE-2025-24253",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24253",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24253.json"
        }
      ],
      "title": "CVE-2025-24253"
    },
    {
      "cve": "CVE-2025-24254",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24254",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24254.json"
        }
      ],
      "title": "CVE-2025-24254"
    },
    {
      "cve": "CVE-2025-24255",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24255",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24255.json"
        }
      ],
      "title": "CVE-2025-24255"
    },
    {
      "cve": "CVE-2025-24256",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24256",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24256.json"
        }
      ],
      "title": "CVE-2025-24256"
    },
    {
      "cve": "CVE-2025-24257",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24257",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24257.json"
        }
      ],
      "title": "CVE-2025-24257"
    },
    {
      "cve": "CVE-2025-24259",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Authorization",
          "title": "CWE-862"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24259",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24259.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24259"
    },
    {
      "cve": "CVE-2025-24260",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24260",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24260.json"
        }
      ],
      "title": "CVE-2025-24260"
    },
    {
      "cve": "CVE-2025-24261",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24261",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24261.json"
        }
      ],
      "title": "CVE-2025-24261"
    },
    {
      "cve": "CVE-2025-24262",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24262",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24262.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24262"
    },
    {
      "cve": "CVE-2025-24263",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24263",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24263.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24263"
    },
    {
      "cve": "CVE-2025-24264",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24264",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24264.json"
        }
      ],
      "title": "CVE-2025-24264"
    },
    {
      "cve": "CVE-2025-24265",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24265",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24265.json"
        }
      ],
      "title": "CVE-2025-24265"
    },
    {
      "cve": "CVE-2025-24266",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24266",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24266.json"
        }
      ],
      "title": "CVE-2025-24266"
    },
    {
      "cve": "CVE-2025-24267",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24267",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24267.json"
        }
      ],
      "title": "CVE-2025-24267"
    },
    {
      "cve": "CVE-2025-24269",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24269",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24269.json"
        }
      ],
      "title": "CVE-2025-24269"
    },
    {
      "cve": "CVE-2025-24272",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24272",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24272.json"
        }
      ],
      "title": "CVE-2025-24272"
    },
    {
      "cve": "CVE-2025-24273",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24273",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24273.json"
        }
      ],
      "title": "CVE-2025-24273"
    },
    {
      "cve": "CVE-2025-24276",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24276",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24276.json"
        }
      ],
      "title": "CVE-2025-24276"
    },
    {
      "cve": "CVE-2025-24277",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24277",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24277.json"
        }
      ],
      "title": "CVE-2025-24277"
    },
    {
      "cve": "CVE-2025-24278",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24278",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24278.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24278"
    },
    {
      "cve": "CVE-2025-24279",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24279",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24279.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24279"
    },
    {
      "cve": "CVE-2025-24280",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24280",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24280.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24280"
    },
    {
      "cve": "CVE-2025-24281",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24281",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24281.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-24281"
    },
    {
      "cve": "CVE-2025-24282",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24282",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24282.json"
        }
      ],
      "title": "CVE-2025-24282"
    },
    {
      "cve": "CVE-2025-24283",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24283",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24283.json"
        }
      ],
      "title": "CVE-2025-24283"
    },
    {
      "cve": "CVE-2025-27113",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27113",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27113.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-27113"
    },
    {
      "cve": "CVE-2025-30424",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30424",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30424.json"
        }
      ],
      "title": "CVE-2025-30424"
    },
    {
      "cve": "CVE-2025-30425",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30425",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30425.json"
        }
      ],
      "title": "CVE-2025-30425"
    },
    {
      "cve": "CVE-2025-30426",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30426",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30426.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-30426"
    },
    {
      "cve": "CVE-2025-30427",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30427",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30427.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-30427"
    },
    {
      "cve": "CVE-2025-30429",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30429",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30429.json"
        }
      ],
      "title": "CVE-2025-30429"
    },
    {
      "cve": "CVE-2025-30430",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30430",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30430.json"
        }
      ],
      "title": "CVE-2025-30430"
    },
    {
      "cve": "CVE-2025-30432",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30432",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30432.json"
        }
      ],
      "title": "CVE-2025-30432"
    },
    {
      "cve": "CVE-2025-30433",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30433",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30433.json"
        }
      ],
      "title": "CVE-2025-30433"
    },
    {
      "cve": "CVE-2025-30435",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30435",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30435.json"
        }
      ],
      "title": "CVE-2025-30435"
    },
    {
      "cve": "CVE-2025-30437",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30437",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30437.json"
        }
      ],
      "title": "CVE-2025-30437"
    },
    {
      "cve": "CVE-2025-30438",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30438",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30438.json"
        }
      ],
      "title": "CVE-2025-30438"
    },
    {
      "cve": "CVE-2025-30439",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30439",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30439.json"
        }
      ],
      "title": "CVE-2025-30439"
    },
    {
      "cve": "CVE-2025-30443",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30443",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30443.json"
        }
      ],
      "title": "CVE-2025-30443"
    },
    {
      "cve": "CVE-2025-30444",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30444",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30444.json"
        }
      ],
      "title": "CVE-2025-30444"
    },
    {
      "cve": "CVE-2025-30446",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30446",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30446.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-30446"
    },
    {
      "cve": "CVE-2025-30447",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30447",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30447.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-30447"
    },
    {
      "cve": "CVE-2025-30449",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30449",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30449.json"
        }
      ],
      "title": "CVE-2025-30449"
    },
    {
      "cve": "CVE-2025-30450",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30450",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30450.json"
        }
      ],
      "title": "CVE-2025-30450"
    },
    {
      "cve": "CVE-2025-30451",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30451",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30451.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-30451"
    },
    {
      "cve": "CVE-2025-30452",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30452",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30452.json"
        }
      ],
      "title": "CVE-2025-30452"
    },
    {
      "cve": "CVE-2025-30454",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30454",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30454.json"
        }
      ],
      "title": "CVE-2025-30454"
    },
    {
      "cve": "CVE-2025-30455",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30455",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30455.json"
        }
      ],
      "title": "CVE-2025-30455"
    },
    {
      "cve": "CVE-2025-30456",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30456",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30456.json"
        }
      ],
      "title": "CVE-2025-30456"
    },
    {
      "cve": "CVE-2025-30457",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30457",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30457.json"
        }
      ],
      "title": "CVE-2025-30457"
    },
    {
      "cve": "CVE-2025-30458",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30458",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30458.json"
        }
      ],
      "title": "CVE-2025-30458"
    },
    {
      "cve": "CVE-2025-30460",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30460",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30460.json"
        }
      ],
      "title": "CVE-2025-30460"
    },
    {
      "cve": "CVE-2025-30461",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30461",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30461.json"
        }
      ],
      "title": "CVE-2025-30461"
    },
    {
      "cve": "CVE-2025-30462",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30462",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30462.json"
        }
      ],
      "title": "CVE-2025-30462"
    },
    {
      "cve": "CVE-2025-30463",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30463",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30463.json"
        }
      ],
      "title": "CVE-2025-30463"
    },
    {
      "cve": "CVE-2025-30464",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30464",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30464.json"
        }
      ],
      "title": "CVE-2025-30464"
    },
    {
      "cve": "CVE-2025-30465",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30465",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30465.json"
        }
      ],
      "title": "CVE-2025-30465"
    },
    {
      "cve": "CVE-2025-30467",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30467",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30467.json"
        }
      ],
      "title": "CVE-2025-30467"
    },
    {
      "cve": "CVE-2025-30470",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30470",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30470.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-30470"
    },
    {
      "cve": "CVE-2025-30471",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30471",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30471.json"
        }
      ],
      "title": "CVE-2025-30471"
    },
    {
      "cve": "CVE-2025-31182",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31182.json"
        }
      ],
      "title": "CVE-2025-31182"
    },
    {
      "cve": "CVE-2025-31183",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31183",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31183.json"
        }
      ],
      "title": "CVE-2025-31183"
    },
    {
      "cve": "CVE-2025-31184",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31184",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31184.json"
        }
      ],
      "title": "CVE-2025-31184"
    },
    {
      "cve": "CVE-2025-31187",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31187",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31187.json"
        }
      ],
      "title": "CVE-2025-31187"
    },
    {
      "cve": "CVE-2025-31188",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31188",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31188.json"
        }
      ],
      "title": "CVE-2025-31188"
    },
    {
      "cve": "CVE-2025-31191",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31191",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31191.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1251566",
            "CSAFPID-1136191",
            "CSAFPID-1245683",
            "CSAFPID-1496144",
            "CSAFPID-2406261",
            "CSAFPID-1902955",
            "CSAFPID-1904383",
            "CSAFPID-1416488",
            "CSAFPID-1916435",
            "CSAFPID-1923307",
            "CSAFPID-1251568",
            "CSAFPID-1136190",
            "CSAFPID-1245685",
            "CSAFPID-1496142",
            "CSAFPID-2406265",
            "CSAFPID-1923306",
            "CSAFPID-1904384",
            "CSAFPID-1915328",
            "CSAFPID-1245684",
            "CSAFPID-1436077",
            "CSAFPID-1463431",
            "CSAFPID-1904042",
            "CSAFPID-2492950",
            "CSAFPID-2470109"
          ]
        }
      ],
      "title": "CVE-2025-31191"
    },
    {
      "cve": "CVE-2025-31192",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31192.json"
        }
      ],
      "title": "CVE-2025-31192"
    },
    {
      "cve": "CVE-2025-31194",
      "product_status": {
        "known_affected": [
          "CSAFPID-1251566",
          "CSAFPID-1136191",
          "CSAFPID-1245683",
          "CSAFPID-1496144",
          "CSAFPID-2406261",
          "CSAFPID-1902955",
          "CSAFPID-1904383",
          "CSAFPID-1416488",
          "CSAFPID-1916435",
          "CSAFPID-1923307",
          "CSAFPID-1251568",
          "CSAFPID-1136190",
          "CSAFPID-1245685",
          "CSAFPID-1496142",
          "CSAFPID-2406265",
          "CSAFPID-1923306",
          "CSAFPID-1904384",
          "CSAFPID-1915328",
          "CSAFPID-1245684",
          "CSAFPID-1436077",
          "CSAFPID-1463431",
          "CSAFPID-1904042",
          "CSAFPID-2492950",
          "CSAFPID-2470109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31194",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31194.json"
        }
      ],
      "title": "CVE-2025-31194"
    }
  ]
}

cve-2025-30438

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:23

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30438",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:13.391417Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:23:06.883Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:02.346Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30438",
    "datePublished": "2025-03-31T22:23:02.346Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-04-02T15:23:06.883Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24277

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:52

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24277",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:28.466279Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:52:43.694Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:22.972Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24277",
    "datePublished": "2025-03-31T22:22:22.972Z",
    "dateReserved": "2025-01-17T00:00:45.019Z",
    "dateUpdated": "2025-04-02T13:52:43.694Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31191

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-05-10 17:04

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31191",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:16:29.373173Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:17:04.790Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-05-10T17:04:46.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:10.313Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31191",
    "datePublished": "2025-03-31T22:24:10.313Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-05-10T17:04:46.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24273

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:26

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24273",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:26:20.296187Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:26:51.662Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination or corrupt kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:32.467Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24273",
    "datePublished": "2025-03-31T22:23:32.467Z",
    "dateReserved": "2025-01-17T00:00:45.017Z",
    "dateUpdated": "2025-04-01T13:26:51.662Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24195

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 03:55

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24195",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:37.193Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A user may be able to elevate privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:23.405Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24195",
    "datePublished": "2025-03-31T22:23:23.405Z",
    "dateReserved": "2025-01-17T00:00:44.998Z",
    "dateUpdated": "2025-04-02T03:55:37.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30447

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:18

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30447",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:18:28.221128Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:18:57.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:08.637Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30447",
    "datePublished": "2025-03-31T22:24:08.637Z",
    "dateReserved": "2025-03-22T00:04:43.719Z",
    "dateUpdated": "2025-04-01T04:18:57.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30464

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 13:12

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30464",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T19:12:43.142729Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T13:12:46.432Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination or corrupt kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:48.409Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30464",
    "datePublished": "2025-03-31T22:22:48.409Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-04-03T13:12:46.432Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24093

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-03-18 11:15

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent.

References

▼	URL	Tags
	https://support.apple.com/en-us/122069
	https://support.apple.com/en-us/122070

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 14.7

Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24093",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T15:44:39.845571Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T11:15:46.763Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access removable volumes without user consent",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:48.196Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122069"
        },
        {
          "url": "https://support.apple.com/en-us/122070"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24093",
    "datePublished": "2025-01-27T21:45:48.196Z",
    "dateReserved": "2025-01-17T00:00:44.967Z",
    "dateUpdated": "2025-03-18T11:15:46.763Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24194

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:21

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A logic issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may result in the disclosure of process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24194",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:55:09.863833Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:21:36.439Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:46.552Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24194",
    "datePublished": "2025-03-31T22:23:46.552Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-04-02T15:21:36.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24255

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:46

Severity ?

8.4 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24255",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:38:55.222571Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:46:02.873Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:04.560Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24255",
    "datePublished": "2025-03-31T22:24:04.560Z",
    "dateReserved": "2025-01-17T00:00:45.013Z",
    "dateUpdated": "2025-04-01T15:46:02.873Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30427

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:18

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30427",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:18:38.091976Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:18:41.175Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:24.350Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30427",
    "datePublished": "2025-03-31T22:24:24.350Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-01T13:18:41.175Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30446

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:20

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app with root privileges may be able to modify the contents of system files.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30446",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:20:54.157841Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:20:56.955Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app with root privileges may be able to modify the contents of system files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app with root privileges may be able to modify the contents of system files",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:12.018Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30446",
    "datePublished": "2025-03-31T22:24:12.018Z",
    "dateReserved": "2025-03-22T00:04:43.718Z",
    "dateUpdated": "2025-04-01T13:20:56.955Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30424

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:47

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Deleting a conversation in Messages may expose user contact information in system logging.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30424",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:44:34.631410Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:47:17.766Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logging issue was addressed with improved data redaction. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Deleting a conversation in Messages may expose user contact information in system logging."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Deleting a conversation in Messages may expose user contact information in system logging",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:26.067Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30424",
    "datePublished": "2025-03-31T22:22:26.067Z",
    "dateReserved": "2025-03-22T00:04:43.715Z",
    "dateUpdated": "2025-04-02T13:47:17.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-40864

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:19

Severity ?

2.7 (Low) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Summary

The issue was addressed with improved handling of protocols. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An attacker in a privileged network position can track a user's activity.

References

▼	URL	Tags
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 14.7

Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 2.7,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-40864",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:19:04.287378Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:19:06.889Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved handling of protocols. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An attacker in a privileged network position can track a user\u0027s activity."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker in a privileged network position can track a user\u0027s activity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:22.413Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-40864",
    "datePublished": "2025-03-31T22:24:22.413Z",
    "dateReserved": "2024-07-10T17:11:04.715Z",
    "dateUpdated": "2025-04-01T13:19:06.889Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24164

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 13:19

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24164",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T19:10:27.598640Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T13:19:46.152Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:28.055Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24164",
    "datePublished": "2025-03-31T22:22:28.055Z",
    "dateReserved": "2025-01-17T00:00:44.988Z",
    "dateUpdated": "2025-04-03T13:19:46.152Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24167

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 03:59

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A download's origin may be incorrectly associated.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24167",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T03:58:17.736372Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T03:59:52.460Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A download\u0027s origin may be incorrectly associated."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A download\u0027s origin may be incorrectly associated",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:26.043Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24167",
    "datePublished": "2025-03-31T22:24:26.043Z",
    "dateReserved": "2025-01-17T00:00:44.989Z",
    "dateUpdated": "2025-04-01T03:59:52.460Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24232

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:21

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access arbitrary files.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24232",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:20:46.764059Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:21:54.279Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access arbitrary files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access arbitrary files",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:34.161Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24232",
    "datePublished": "2025-03-31T22:23:34.161Z",
    "dateReserved": "2025-01-17T00:00:45.006Z",
    "dateUpdated": "2025-04-01T13:21:54.279Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24148

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:20

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24148",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T15:01:55.396955Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-354",
                "description": "CWE-354 Improper Validation of Integrity Check Value",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:04.616Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious JAR file may bypass Gatekeeper checks",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:20.776Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24148",
    "datePublished": "2025-03-31T22:22:20.776Z",
    "dateReserved": "2025-01-17T00:00:44.976Z",
    "dateUpdated": "2025-04-02T15:20:04.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24210

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:25

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

A logic error was addressed with improved error handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Parsing an image may lead to disclosure of user information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24210",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:23:05.463704Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-783",
                "description": "CWE-783 Operator Precedence Logic Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:25:02.925Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic error was addressed with improved error handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Parsing an image may lead to disclosure of user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Parsing an image may lead to disclosure of user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:59.513Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24210",
    "datePublished": "2025-03-31T22:22:59.513Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-04-01T14:25:02.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24267

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 13:19

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:18:21.633513Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:19:58.338Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:04.161Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24267",
    "datePublished": "2025-03-31T22:23:04.161Z",
    "dateReserved": "2025-01-17T00:00:45.017Z",
    "dateUpdated": "2025-04-02T13:19:58.338Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-48958

Vulnerability from cvelistv5

Published

2024-10-10 00:00

Modified

2024-10-10 20:35

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

References

▼	URL	Tags
	https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5
	https://github.com/libarchive/libarchive/pull/2148

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "libarchive",
            "vendor": "libarchive",
            "versions": [
              {
                "lessThan": "3.7.5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-48958",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T20:35:05.629427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T20:35:53.287Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-10T01:21:04.109520",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5"
        },
        {
          "url": "https://github.com/libarchive/libarchive/pull/2148"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-48958",
    "datePublished": "2024-10-10T00:00:00",
    "dateReserved": "2024-10-10T00:00:00",
    "dateUpdated": "2024-10-10T20:35:53.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24249

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:44

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to check the existence of an arbitrary path on the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24249",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:42:41.351501Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:44:02.335Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to check the existence of an arbitrary path on the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to check the existence of an arbitrary path on the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:28.909Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24249",
    "datePublished": "2025-03-31T22:23:28.909Z",
    "dateReserved": "2025-01-17T00:00:45.009Z",
    "dateUpdated": "2025-04-01T20:44:02.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24264

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:18

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24264",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:17:25.800640Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:18:17.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:36.148Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24264",
    "datePublished": "2025-03-31T22:23:36.148Z",
    "dateReserved": "2025-01-17T00:00:45.016Z",
    "dateUpdated": "2025-04-01T13:18:17.203Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24282

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 13:17

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24282",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T19:10:16.324432Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T13:17:58.206Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:31.180Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24282",
    "datePublished": "2025-03-31T22:22:31.180Z",
    "dateReserved": "2025-01-17T00:00:45.020Z",
    "dateUpdated": "2025-04-03T13:17:58.206Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24238

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-02 03:55

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24238",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:21.679Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain elevated privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:09.471Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24238",
    "datePublished": "2025-03-31T22:24:09.471Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-04-02T03:55:21.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31192

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:13

Severity ?

6.7 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:17:45.905890Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-305",
                "description": "CWE-305 Authentication Bypass by Primary Weakness",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:13:57.590Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to access sensor information without user consent",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:30.090Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31192",
    "datePublished": "2025-03-31T22:22:30.090Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-04-03T20:13:57.590Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24233

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:19

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to read or write to protected files.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24233",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:18:53.347400Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:19:41.428Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to read or write to protected files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to read or write to protected files",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:35.270Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24233",
    "datePublished": "2025-03-31T22:23:35.270Z",
    "dateReserved": "2025-01-17T00:00:45.006Z",
    "dateUpdated": "2025-04-01T13:19:41.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24218

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 19:27

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. An app may be able to access information about a user's contacts.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24218",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:26:53.643459Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:27:30.859Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. An app may be able to access information about a user\u0027s contacts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access information about a user\u0027s contacts",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:51.874Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24218",
    "datePublished": "2025-03-31T22:23:51.874Z",
    "dateReserved": "2025-01-17T00:00:45.003Z",
    "dateUpdated": "2025-04-01T19:27:30.859Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24180

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:00

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24180",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:56:02.656511Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-601",
                "description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:00:32.367Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:12.556Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24180",
    "datePublished": "2025-03-31T22:23:12.556Z",
    "dateReserved": "2025-01-17T00:00:44.993Z",
    "dateUpdated": "2025-04-01T14:00:32.367Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31187

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:38

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31187",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:37:54.419541Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:38:27.320Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:14.853Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31187",
    "datePublished": "2025-03-31T22:24:14.853Z",
    "dateReserved": "2025-03-27T16:13:58.311Z",
    "dateUpdated": "2025-04-01T15:38:27.320Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31183

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:49

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31183",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:48:30.897543Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:49:56.649Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:19.820Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31183",
    "datePublished": "2025-03-31T22:23:19.820Z",
    "dateReserved": "2025-03-27T16:13:58.311Z",
    "dateUpdated": "2025-04-01T13:49:56.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24202

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 16:07

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24202",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T16:01:38.802033Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:07:22.477Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:02.678Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24202",
    "datePublished": "2025-03-31T22:24:02.678Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-04-01T16:07:22.477Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24254

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-02 03:55

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24254",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "CWE-269 Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:20.176Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A user may be able to elevate privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:16.825Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24254",
    "datePublished": "2025-03-31T22:24:16.825Z",
    "dateReserved": "2025-01-17T00:00:45.013Z",
    "dateUpdated": "2025-04-02T03:55:20.176Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30449

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 17:44

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30449",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:27.062720Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "CWE-281 Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T17:44:30.512Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:18.746Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30449",
    "datePublished": "2025-03-31T22:22:18.746Z",
    "dateReserved": "2025-03-22T00:04:43.719Z",
    "dateUpdated": "2025-04-03T17:44:30.512Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24228

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 03:55

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to execute arbitrary code with kernel privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24228",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:38.524Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to execute arbitrary code with kernel privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to execute arbitrary code with kernel privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:26.187Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24228",
    "datePublished": "2025-03-31T22:23:26.187Z",
    "dateReserved": "2025-01-17T00:00:45.005Z",
    "dateUpdated": "2025-04-02T03:55:38.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30461

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:42

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30461",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:41:25.492106Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:42:09.475Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:29.842Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30461",
    "datePublished": "2025-03-31T22:23:29.842Z",
    "dateReserved": "2025-03-22T00:04:43.721Z",
    "dateUpdated": "2025-04-01T20:42:09.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24205

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:20

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24205",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:53:06.180161Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:47.576Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access user-sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:47.476Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24205",
    "datePublished": "2025-03-31T22:23:47.476Z",
    "dateReserved": "2025-01-17T00:00:45.000Z",
    "dateUpdated": "2025-04-02T15:20:47.576Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24191

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 13:17

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24191",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T19:09:28.960128Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T13:17:19.277Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:34.901Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24191",
    "datePublished": "2025-03-31T22:22:34.901Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-04-03T13:17:19.277Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31188

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-07 18:28

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to bypass Privacy preferences.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31188",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T18:27:24.996479Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T18:28:41.748Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to bypass Privacy preferences."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to bypass Privacy preferences",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:24.068Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31188",
    "datePublished": "2025-03-31T22:22:24.068Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-04-07T18:28:41.748Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24163

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-03-18 19:44

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122069
	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122072
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122067
	https://support.apple.com/en-us/122071
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 14.7

Apple	visionOS	Version: unspecified < 2.3
Apple	tvOS	Version: unspecified < 18.3
Apple	macOS	Version: unspecified < 15.3
Apple	iPadOS	Version: unspecified < 17.7
Apple	watchOS	Version: unspecified < 11.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24163",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T15:27:50.828926Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T19:44:36.835Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Parsing a file may lead to an unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:54.808Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122069"
        },
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122072"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122067"
        },
        {
          "url": "https://support.apple.com/en-us/122071"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24163",
    "datePublished": "2025-01-27T21:45:54.808Z",
    "dateReserved": "2025-01-17T00:00:44.988Z",
    "dateUpdated": "2025-03-18T19:44:36.835Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24263

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 04:27

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15.4. An app may be able to observe unprotected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24263",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:27:28.907592Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:27:52.048Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15.4. An app may be able to observe unprotected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to observe unprotected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:57.655Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24263",
    "datePublished": "2025-03-31T22:23:57.655Z",
    "dateReserved": "2025-01-17T00:00:45.016Z",
    "dateUpdated": "2025-04-01T04:27:52.048Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-9681

Vulnerability from cvelistv5

Published

2024-11-06 07:47

Modified

2024-12-13 13:09

Severity ?

5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Summary

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host. (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.) When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache. The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended.

References

▼	URL	Tags
	https://curl.se/docs/CVE-2024-9681.json
	https://curl.se/docs/CVE-2024-9681.html
	https://hackerone.com/reports/2764830

Impacted products

	Vendor	Product	Version
	curl	curl	Version: 8.10.1 ≤ 8.10.1 Version: 8.10.0 ≤ 8.10.0 Version: 8.9.1 ≤ 8.9.1 Version: 8.9.0 ≤ 8.9.0 Version: 8.8.0 ≤ 8.8.0 Version: 8.7.1 ≤ 8.7.1 Version: 8.7.0 ≤ 8.7.0 Version: 8.6.0 ≤ 8.6.0 Version: 8.5.0 ≤ 8.5.0 Version: 8.4.0 ≤ 8.4.0 Version: 8.3.0 ≤ 8.3.0 Version: 8.2.1 ≤ 8.2.1 Version: 8.2.0 ≤ 8.2.0 Version: 8.1.2 ≤ 8.1.2 Version: 8.1.1 ≤ 8.1.1 Version: 8.1.0 ≤ 8.1.0 Version: 8.0.1 ≤ 8.0.1 Version: 8.0.0 ≤ 8.0.0 Version: 7.88.1 ≤ 7.88.1 Version: 7.88.0 ≤ 7.88.0 Version: 7.87.0 ≤ 7.87.0 Version: 7.86.0 ≤ 7.86.0 Version: 7.85.0 ≤ 7.85.0 Version: 7.84.0 ≤ 7.84.0 Version: 7.83.1 ≤ 7.83.1 Version: 7.83.0 ≤ 7.83.0 Version: 7.82.0 ≤ 7.82.0 Version: 7.81.0 ≤ 7.81.0 Version: 7.80.0 ≤ 7.80.0 Version: 7.79.1 ≤ 7.79.1 Version: 7.79.0 ≤ 7.79.0 Version: 7.78.0 ≤ 7.78.0 Version: 7.77.0 ≤ 7.77.0 Version: 7.76.1 ≤ 7.76.1 Version: 7.76.0 ≤ 7.76.0 Version: 7.75.0 ≤ 7.75.0 Version: 7.74.0 ≤ 7.74.0

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-12-13T13:09:28.285Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/11/06/2"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241213-0006/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "curl",
            "vendor": "curl",
            "versions": [
              {
                "lessThan": "7.74.0",
                "status": "unaffected",
                "version": "0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "8.10.1",
                "status": "affected",
                "version": "7.74.0",
                "versionType": "semver"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8.11.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T16:16:59.652768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:09:00.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.80.0",
              "status": "affected",
              "version": "7.80.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.1",
              "status": "affected",
              "version": "7.79.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.0",
              "status": "affected",
              "version": "7.79.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.78.0",
              "status": "affected",
              "version": "7.78.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.77.0",
              "status": "affected",
              "version": "7.77.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.1",
              "status": "affected",
              "version": "7.76.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.0",
              "status": "affected",
              "version": "7.76.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.75.0",
              "status": "affected",
              "version": "7.75.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.74.0",
              "status": "affected",
              "version": "7.74.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "newfunction"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Stenberg"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl\u0027s HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1025 Comparison Using Wrong Factors",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-06T07:47:20.162Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "name": "json",
          "url": "https://curl.se/docs/CVE-2024-9681.json"
        },
        {
          "name": "www",
          "url": "https://curl.se/docs/CVE-2024-9681.html"
        },
        {
          "name": "issue",
          "url": "https://hackerone.com/reports/2764830"
        }
      ],
      "title": "HSTS subdomain overwrites parent cache entry"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2024-9681",
    "datePublished": "2024-11-06T07:47:20.162Z",
    "dateReserved": "2024-10-09T07:57:47.318Z",
    "dateUpdated": "2024-12-13T13:09:28.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24230

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 13:21

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Playing a malicious audio file may lead to an unexpected app termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24230",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:21:06.127067Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:21:39.430Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Playing a malicious audio file may lead to an unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Playing a malicious audio file may lead to an unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:03.205Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24230",
    "datePublished": "2025-03-31T22:23:03.205Z",
    "dateReserved": "2025-01-17T00:00:45.005Z",
    "dateUpdated": "2025-04-02T13:21:39.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24085

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-03-13 15:48

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

References

▼	URL	Tags
	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122072
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122071
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

▼

visionOS

Version: unspecified < 2.3

Apple	tvOS	Version: unspecified < 18.3
Apple	macOS	Version: unspecified < 15.3
Apple	watchOS	Version: unspecified < 11.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24085",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T04:55:32.452789Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-01-29",
                "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T15:48:30.524Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:46.555Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122072"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122071"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24085",
    "datePublished": "2025-01-27T21:45:46.555Z",
    "dateReserved": "2025-01-17T00:00:44.965Z",
    "dateUpdated": "2025-03-13T15:48:30.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24234

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 03:55

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to gain root privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24234",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:34.479Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:58.620Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24234",
    "datePublished": "2025-03-31T22:23:58.620Z",
    "dateReserved": "2025-01-17T00:00:45.006Z",
    "dateUpdated": "2025-04-02T03:55:34.479Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24266

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:04

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24266",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:03:24.253809Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:04:04.268Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:10.665Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24266",
    "datePublished": "2025-03-31T22:23:10.665Z",
    "dateReserved": "2025-01-17T00:00:45.017Z",
    "dateUpdated": "2025-04-01T14:04:04.268Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30426

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 04:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user's installed apps.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30426",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:29:36.628442Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:30:14.110Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user\u0027s installed apps."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to enumerate a user\u0027s installed apps",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:55.589Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30426",
    "datePublished": "2025-03-31T22:23:55.589Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-01T04:30:14.110Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30433

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:33

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30433",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:33:03.281567Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:33:37.358Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:47.415Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30433",
    "datePublished": "2025-03-31T22:22:47.415Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-02T13:33:37.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-54533

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:11

Severity ?

7.0 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

Summary

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 14.7

Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54533",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:09:27.681266Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:11:59.819Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:38.079Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54533",
    "datePublished": "2025-03-31T22:23:38.079Z",
    "dateReserved": "2024-12-03T22:50:35.511Z",
    "dateUpdated": "2025-04-01T18:11:59.819Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30467

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 19:26

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30467",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:24:28.140256Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-451",
                "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:26:37.878Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to address bar spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:52.835Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30467",
    "datePublished": "2025-03-31T22:23:52.835Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-04-01T19:26:37.878Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24196

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:48

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

Version: unspecified < 14.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24196",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:47:33.321391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:48:16.375Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with user privileges may be able to read kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:17.180Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24196",
    "datePublished": "2025-03-31T22:23:17.180Z",
    "dateReserved": "2025-01-17T00:00:44.998Z",
    "dateUpdated": "2025-04-01T20:48:16.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24209

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:17

Severity ?

7.0 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24209",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:15:08.714331Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:17:16.890Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:39.898Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24209",
    "datePublished": "2025-03-31T22:23:39.898Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-04-01T18:17:16.890Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24259

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 04:32

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to retrieve Safari bookmarks without an entitlement check.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24259",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:31:23.812792Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:32:06.097Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to retrieve Safari bookmarks without an entitlement check."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to retrieve Safari bookmarks without an entitlement check",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:54.594Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24259",
    "datePublished": "2025-03-31T22:23:54.594Z",
    "dateReserved": "2025-01-17T00:00:45.015Z",
    "dateUpdated": "2025-04-01T04:32:06.097Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30455

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:28

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

Version: unspecified < 14.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30455",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:27:49.870901Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:28:32.285Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:57.594Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30455",
    "datePublished": "2025-03-31T22:22:57.594Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-01T14:28:32.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30465

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 14:31

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

References

▼	URL	Tags
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30465",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:28:51.335100Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T14:31:06.035Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:27.093Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30465",
    "datePublished": "2025-03-31T22:22:27.093Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-04-02T14:31:06.035Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24279

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:45

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access contacts.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24279",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:45:26.939787Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:45:29.923Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access contacts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access contacts",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:06.591Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24279",
    "datePublished": "2025-03-31T22:24:06.591Z",
    "dateReserved": "2025-01-17T00:00:45.019Z",
    "dateUpdated": "2025-04-01T13:45:29.923Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30435

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:13

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30435",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:11:51.297400Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:13:03.120Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A sandboxed app may be able to access sensitive user data in system logs",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:07.795Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30435",
    "datePublished": "2025-03-31T22:23:07.795Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-04-01T14:13:03.120Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30456

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-03 17:45

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30456",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:32.610940Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "CWE-281 Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T17:45:45.180Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:45.632Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30456",
    "datePublished": "2025-03-31T22:23:45.632Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-03T17:45:45.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24237

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:38

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A buffer overflow was addressed with improved bounds checking. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24237",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:36:30.367003Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:38:53.510Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:53.689Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24237",
    "datePublished": "2025-03-31T22:22:53.689Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-04-01T14:38:53.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24235

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:19

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote attacker may be able to cause unexpected app termination or heap corruption.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24235",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:19:19.865176Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:19:22.394Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote attacker may be able to cause unexpected app termination or heap corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote attacker may be able to cause unexpected app termination or heap corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:21.445Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24235",
    "datePublished": "2025-03-31T22:24:21.445Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-04-01T13:19:22.394Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24097

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:23

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to read arbitrary file metadata.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24097",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:22:50.277186Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:23:27.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to read arbitrary file metadata."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read arbitrary file metadata",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:00.602Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24097",
    "datePublished": "2025-03-31T22:24:00.602Z",
    "dateReserved": "2025-01-17T00:00:44.967Z",
    "dateUpdated": "2025-04-01T04:23:27.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24229

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:26

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A sandboxed app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24229",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:24:59.591777Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:26:19.641Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A sandboxed app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A sandboxed app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:44.472Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24229",
    "datePublished": "2025-03-31T22:23:44.472Z",
    "dateReserved": "2025-01-17T00:00:45.005Z",
    "dateUpdated": "2025-04-01T18:26:19.641Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24246

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:52

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An injection issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24246",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:52:12.058243Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:52:57.580Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An injection issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access user-sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:14.438Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24246",
    "datePublished": "2025-03-31T22:23:14.438Z",
    "dateReserved": "2025-01-17T00:00:45.009Z",
    "dateUpdated": "2025-04-01T20:52:57.580Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24250

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:46

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24250",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:46:09.404445Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:46:49.196Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app acting as a HTTPS proxy could get access to sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:17.977Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24250",
    "datePublished": "2025-03-31T22:23:17.977Z",
    "dateReserved": "2025-01-17T00:00:45.010Z",
    "dateUpdated": "2025-04-01T20:46:49.196Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30444

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:35

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Mounting a maliciously crafted SMB network share may lead to system termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30444",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:34:50.099709Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:35:56.344Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Mounting a maliciously crafted SMB network share may lead to system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Mounting a maliciously crafted SMB network share may lead to system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:46.461Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30444",
    "datePublished": "2025-03-31T22:22:46.461Z",
    "dateReserved": "2025-03-22T00:04:43.718Z",
    "dateUpdated": "2025-04-02T13:35:56.344Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31184

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-07 18:29

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31184",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T18:29:16.861062Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "CWE-281 Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T18:29:55.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may gain unauthorized access to Local Network",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:32.148Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31184",
    "datePublished": "2025-03-31T22:22:32.148Z",
    "dateReserved": "2025-03-27T16:13:58.311Z",
    "dateUpdated": "2025-04-07T18:29:55.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30437

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:20

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30437",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:19:34.237626Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:20:18.123Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to corrupt coprocessor memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:41.741Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30437",
    "datePublished": "2025-03-31T22:23:41.741Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-04-01T18:20:18.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24276

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:23

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24276",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:21.928076Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:23:37.852Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:51.764Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24276",
    "datePublished": "2025-03-31T22:22:51.764Z",
    "dateReserved": "2025-01-17T00:00:45.019Z",
    "dateUpdated": "2025-04-02T15:23:37.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30454

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:52

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30454",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:51:19.701739Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:52:22.662Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:18.889Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30454",
    "datePublished": "2025-03-31T22:23:18.889Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-01T13:52:22.662Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24278

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:19

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Summary

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24278",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:19:48.658701Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-59",
                "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:19:52.136Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:13.916Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24278",
    "datePublished": "2025-03-31T22:24:13.916Z",
    "dateReserved": "2025-01-17T00:00:45.019Z",
    "dateUpdated": "2025-04-01T13:19:52.136Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31182

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31182",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:29:59.647862Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:30:51.884Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to delete files for which it does not have permission",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:56.605Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31182",
    "datePublished": "2025-03-31T22:22:56.605Z",
    "dateReserved": "2025-03-27T16:13:58.310Z",
    "dateUpdated": "2025-04-01T14:30:51.884Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24253

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:38

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24253",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:37:47.519632Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:38:21.770Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:24.289Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24253",
    "datePublished": "2025-03-31T22:23:24.289Z",
    "dateReserved": "2025-01-17T00:00:45.013Z",
    "dateUpdated": "2025-04-01T13:38:21.770Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30463

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:17

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30463",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:16:49.115468Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:17:50.780Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:05.846Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30463",
    "datePublished": "2025-03-31T22:23:05.846Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-04-01T14:17:50.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24262

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:05

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24262",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:04:44.355016Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:05:21.744Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A sandboxed app may be able to access sensitive user data in system logs",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:23.395Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24262",
    "datePublished": "2025-03-31T22:24:23.395Z",
    "dateReserved": "2025-01-17T00:00:45.015Z",
    "dateUpdated": "2025-04-01T04:05:21.744Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24198

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:13

Severity ?

6.6 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access may be able to use Siri to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24198",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:13:20.724903Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:13:50.003Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access may be able to use Siri to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with physical access may be able to use Siri to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:38.971Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24198",
    "datePublished": "2025-03-31T22:23:38.971Z",
    "dateReserved": "2025-01-17T00:00:44.998Z",
    "dateUpdated": "2025-04-01T18:13:50.003Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30443

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:32

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30443",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:32:12.159713Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:32:43.168Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access user-sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:55.491Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30443",
    "datePublished": "2025-03-31T22:22:55.491Z",
    "dateReserved": "2025-03-22T00:04:43.718Z",
    "dateUpdated": "2025-04-01T14:32:43.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24213

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-03 17:46

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A type confusion issue could lead to memory corruption.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24213",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:29.888734Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T17:46:55.488Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A type confusion issue could lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A type confusion issue could lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:48.296Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24213",
    "datePublished": "2025-03-31T22:23:48.296Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-03T17:46:55.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24190

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:46

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24190",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:46:00.795562Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:46:43.406Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:42.664Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24190",
    "datePublished": "2025-03-31T22:22:42.664Z",
    "dateReserved": "2025-01-17T00:00:44.996Z",
    "dateUpdated": "2025-04-01T14:46:43.406Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24199

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:28

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Summary

An uncontrolled format string issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause a denial-of-service.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24199",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:27:36.467998Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:28:45.468Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An uncontrolled format string issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause a denial-of-service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause a denial-of-service",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:31.579Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24199",
    "datePublished": "2025-03-31T22:23:31.579Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-04-01T13:28:45.468Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24173

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:24

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24173",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:29.447421Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:24:25.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:49.244Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24173",
    "datePublished": "2025-03-31T22:22:49.244Z",
    "dateReserved": "2025-01-17T00:00:44.990Z",
    "dateUpdated": "2025-04-02T15:24:25.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30458

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:06

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30458",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:05:35.562241Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:06:26.435Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read files outside of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:09.787Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30458",
    "datePublished": "2025-03-31T22:23:09.787Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-01T14:06:26.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31194

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:35

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A Shortcut may run with admin privileges without authentication.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31194",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:34:18.723624Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:35:20.055Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A Shortcut may run with admin privileges without authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A Shortcut may run with admin privileges without authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:54.641Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31194",
    "datePublished": "2025-03-31T22:22:54.641Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-04-01T14:35:20.055Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30457

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:36

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to create symlinks to protected regions of the disk.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30457",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:34:23.411979Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-59",
                "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:36:54.679Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to create symlinks to protected regions of the disk."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to create symlinks to protected regions of the disk",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:25.244Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30457",
    "datePublished": "2025-03-31T22:23:25.244Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-01T13:36:54.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24192

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:08

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:03:00.646851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:08:12.601Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a website may leak sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:17.665Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24192",
    "datePublished": "2025-03-31T22:24:17.665Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-04-01T15:08:12.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30452

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:38

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An input validation issue was addressed.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30452",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:37:15.634000Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:38:31.879Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An input validation issue was addressed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An input validation issue was addressed",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:44.599Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30452",
    "datePublished": "2025-03-31T22:22:44.599Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-02T13:38:31.879Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30470

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:02

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to read sensitive location information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30470",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:01:05.904338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:02:51.380Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to read sensitive location information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read sensitive location information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:25.184Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30470",
    "datePublished": "2025-03-31T22:24:25.184Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-04-01T13:02:51.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24212

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 13:09

Severity ?

6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Summary

This issue was addressed with improved checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24212",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:09:43.563462Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:09:49.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:21.568Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24212",
    "datePublished": "2025-03-31T22:23:21.568Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-02T13:09:49.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30462

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:10

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Apps that appear to use App Sandbox may be able to launch without restrictions.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30462",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:07:08.861104Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:10:36.524Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Apps that appear to use App Sandbox may be able to launch without restrictions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Apps that appear to use App Sandbox may be able to launch without restrictions",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:08.805Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30462",
    "datePublished": "2025-03-31T22:23:08.805Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-04-01T14:10:36.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24281

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:13

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24281",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:12:13.070616Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:13:07.118Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:12.958Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24281",
    "datePublished": "2025-03-31T22:24:12.958Z",
    "dateReserved": "2025-01-17T00:00:45.020Z",
    "dateUpdated": "2025-04-01T04:13:07.118Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24283

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:19

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:50.801857Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:19:35.557Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logging issue was addressed with improved data redaction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:45.502Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24283",
    "datePublished": "2025-03-31T22:22:45.502Z",
    "dateReserved": "2025-01-17T00:00:45.020Z",
    "dateUpdated": "2025-04-02T15:19:35.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24241

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:41

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to trick a user into copying sensitive data to the pasteboard.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24241",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:39:07.253735Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:41:10.529Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to trick a user into copying sensitive data to the pasteboard."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to trick a user into copying sensitive data to the pasteboard",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:38.772Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24241",
    "datePublished": "2025-03-31T22:22:38.772Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-04-02T13:41:10.529Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24204

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:44

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24204",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:43:33.668974Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:44:53.131Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:22.448Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24204",
    "datePublished": "2025-03-31T22:23:22.448Z",
    "dateReserved": "2025-01-17T00:00:45.000Z",
    "dateUpdated": "2025-04-01T13:44:53.131Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24261

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:20

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24261",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:58:04.436015Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:16.770Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:21.743Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24261",
    "datePublished": "2025-03-31T22:22:21.743Z",
    "dateReserved": "2025-01-17T00:00:45.015Z",
    "dateUpdated": "2025-04-02T15:20:16.770Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24172

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:50

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. "Block All Remote Content" may not apply for all mail previews.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24172",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:49:20.412210Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:50:27.580Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. \"Block All Remote Content\" may not apply for all mail previews."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "\"Block All Remote Content\" may not apply for all mail previews",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:25.074Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24172",
    "datePublished": "2025-03-31T22:22:25.074Z",
    "dateReserved": "2025-01-17T00:00:44.990Z",
    "dateUpdated": "2025-04-02T13:50:27.580Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24157

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:24

Severity ?

5.6 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24157",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:23:29.223273Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:24:35.804Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination or corrupt kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:43.576Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24157",
    "datePublished": "2025-03-31T22:23:43.576Z",
    "dateReserved": "2025-01-17T00:00:44.986Z",
    "dateUpdated": "2025-04-01T18:24:35.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30471

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:52

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A validation issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote user may be able to cause a denial-of-service.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30471",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:48:41.140539Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:52:14.967Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A validation issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote user may be able to cause a denial-of-service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote user may be able to cause a denial-of-service",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:53.668Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30471",
    "datePublished": "2025-03-31T22:23:53.668Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-04-02T15:52:14.967Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24139

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-03-24 17:20

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a maliciously crafted file may lead to an unexpected app termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122069
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122070

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 14.7

	Apple	macOS	Version: unspecified < 15.3
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24139",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T15:48:39.943340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-24T17:20:05.037Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a maliciously crafted file may lead to an unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Parsing a maliciously crafted file may lead to an unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:47.355Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122069"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122070"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24139",
    "datePublished": "2025-01-27T21:45:47.355Z",
    "dateReserved": "2025-01-17T00:00:44.975Z",
    "dateUpdated": "2025-03-24T17:20:05.037Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-56171

Vulnerability from cvelistv5

Published

2025-02-18 00:00

Modified

2025-03-28 15:03

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Summary

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

References

▼	URL	Tags
	https://gitlab.gnome.org/GNOME/libxml2/-/issues/828

Impacted products

	Vendor	Product	Version
	xmlsoft	libxml2	Version: 0 ≤ Version: 2.13.0 ≤

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-56171",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-19T16:26:31.484719Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-19T16:26:41.297Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-03-28T15:03:06.595Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250328-0010/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "libxml2",
          "vendor": "xmlsoft",
          "versions": [
            {
              "lessThan": "2.12.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.6",
              "status": "affected",
              "version": "2.13.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.12.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.13.6",
                  "versionStartIncluding": "2.13.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T22:10:20.934Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/828"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-56171",
    "datePublished": "2025-02-18T00:00:00.000Z",
    "dateReserved": "2024-12-18T00:00:00.000Z",
    "dateUpdated": "2025-03-28T15:03:06.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30425

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:32

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Summary

This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30425",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:30:55.559638Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:32:24.826Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may be able to track users in Safari private browsing mode",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:50.104Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30425",
    "datePublished": "2025-03-31T22:22:50.104Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-02T13:32:24.826Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24236

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:19

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

Version: unspecified < 14.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24236",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T15:02:13.754287Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:19:51.891Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:19.815Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24236",
    "datePublished": "2025-03-31T22:22:19.815Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-04-02T15:19:51.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24170

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 03:55

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 14.7

Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24170",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:23.080Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:56.659Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24170",
    "datePublished": "2025-03-31T22:23:56.659Z",
    "dateReserved": "2025-01-17T00:00:44.990Z",
    "dateUpdated": "2025-04-02T03:55:23.080Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24182

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 19:41

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24182",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:40:34.727397Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:41:30.848Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted font may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:50.082Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24182",
    "datePublished": "2025-03-31T22:23:50.082Z",
    "dateReserved": "2025-01-17T00:00:44.993Z",
    "dateUpdated": "2025-04-01T19:41:30.848Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24211

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:51

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:50:59.364265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:51:42.514Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:15.300Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24211",
    "datePublished": "2025-03-31T22:23:15.300Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-01T20:51:42.514Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24245

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:47

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24245",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:47:12.162984Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:47:51.765Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user\u0027s saved passwords."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access a user\u0027s saved passwords",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:20.717Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24245",
    "datePublished": "2025-03-31T22:23:20.717Z",
    "dateReserved": "2025-01-17T00:00:45.009Z",
    "dateUpdated": "2025-04-01T13:47:51.765Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24113

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-01-31 21:40

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Summary

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing.

References

▼	URL	Tags
	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122074
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

▼

visionOS

Version: unspecified < 2.3

Apple	macOS	Version: unspecified < 15.3
Apple	Safari	Version: unspecified < 18.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24113",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-30T21:31:48.960842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-31T21:40:20.048Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to user interface spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:26.736Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122074"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24113",
    "datePublished": "2025-01-27T21:45:26.736Z",
    "dateReserved": "2025-01-17T00:00:44.970Z",
    "dateUpdated": "2025-01-31T21:40:20.048Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30450

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:37

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30450",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:36:58.900621Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:37:39.479Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:15.951Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30450",
    "datePublished": "2025-03-31T22:24:15.951Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-01T15:37:39.479Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24217

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:50

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	iOS and iPadOS	Version: unspecified < 18.4
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24217",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:49:50.330155Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:50:44.832Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:40.756Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24217",
    "datePublished": "2025-03-31T22:22:40.756Z",
    "dateReserved": "2025-01-17T00:00:45.003Z",
    "dateUpdated": "2025-04-01T14:50:44.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-27043

Vulnerability from cvelistv5

Published

2023-04-18 00:00

Modified

2024-08-02 12:01

Severity ?

Summary

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.

References

▼	URL	Tags
	https://github.com/python/cpython/issues/102988
	http://python.org
	https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html
	https://security.netapp.com/advisory/ntap-20230601-0003/
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/	vendor-advisory

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T12:01:32.288Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/python/cpython/issues/102988"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://python.org"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230601-0003/"
          },
          {
            "name": "FEDORA-2023-88fbb78cd3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/"
          },
          {
            "name": "FEDORA-2023-555b4d49b1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/"
          },
          {
            "name": "FEDORA-2023-2f86a608b2",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/"
          },
          {
            "name": "FEDORA-2023-1bb427c240",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/"
          },
          {
            "name": "FEDORA-2023-87771f4249",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/"
          },
          {
            "name": "FEDORA-2023-c61a7d5227",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/"
          },
          {
            "name": "FEDORA-2023-d577604e6a",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/"
          },
          {
            "name": "FEDORA-2023-7d223ee343",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/"
          },
          {
            "name": "FEDORA-2023-c0bf8c0c4e",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/"
          },
          {
            "name": "FEDORA-2023-f96ff39b59",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/"
          },
          {
            "name": "FEDORA-2023-8085628fff",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/"
          },
          {
            "name": "FEDORA-2023-d01f8a69b4",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/"
          },
          {
            "name": "FEDORA-2023-b245e992ea",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/"
          },
          {
            "name": "FEDORA-2023-0583eedde7",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/"
          },
          {
            "name": "FEDORA-2024-06ff0a6def",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/"
          },
          {
            "name": "FEDORA-2024-3ab90a5b01",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/"
          },
          {
            "name": "FEDORA-2023-0583eedde7",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/"
          },
          {
            "name": "FEDORA-2024-8df4ac93d7",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/"
          },
          {
            "name": "FEDORA-2024-94e0390e4e",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-25T02:06:33.426180",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/python/cpython/issues/102988"
        },
        {
          "url": "http://python.org"
        },
        {
          "url": "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230601-0003/"
        },
        {
          "name": "FEDORA-2023-88fbb78cd3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/"
        },
        {
          "name": "FEDORA-2023-555b4d49b1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/"
        },
        {
          "name": "FEDORA-2023-2f86a608b2",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/"
        },
        {
          "name": "FEDORA-2023-1bb427c240",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/"
        },
        {
          "name": "FEDORA-2023-87771f4249",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/"
        },
        {
          "name": "FEDORA-2023-c61a7d5227",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/"
        },
        {
          "name": "FEDORA-2023-d577604e6a",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/"
        },
        {
          "name": "FEDORA-2023-7d223ee343",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/"
        },
        {
          "name": "FEDORA-2023-c0bf8c0c4e",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/"
        },
        {
          "name": "FEDORA-2023-f96ff39b59",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/"
        },
        {
          "name": "FEDORA-2023-8085628fff",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/"
        },
        {
          "name": "FEDORA-2023-d01f8a69b4",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/"
        },
        {
          "name": "FEDORA-2023-b245e992ea",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/"
        },
        {
          "name": "FEDORA-2023-0583eedde7",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/"
        },
        {
          "name": "FEDORA-2024-06ff0a6def",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/"
        },
        {
          "name": "FEDORA-2024-3ab90a5b01",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/"
        },
        {
          "name": "FEDORA-2023-0583eedde7",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/"
        },
        {
          "name": "FEDORA-2024-8df4ac93d7",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/"
        },
        {
          "name": "FEDORA-2024-94e0390e4e",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-27043",
    "datePublished": "2023-04-18T00:00:00",
    "dateReserved": "2023-02-27T00:00:00",
    "dateUpdated": "2024-08-02T12:01:32.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24216

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:16

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Summary

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24216",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:13:08.369709Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-508",
                "description": "CWE-508 Non-Replicating Malicious Code",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:16:06.043Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:35.858Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24216",
    "datePublished": "2025-03-31T22:22:35.858Z",
    "dateReserved": "2025-01-17T00:00:45.003Z",
    "dateUpdated": "2025-04-03T20:16:06.043Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30430

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 19:39

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30430",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:37:06.283551Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:39:13.322Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Password autofill may fill in passwords after failing authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:50.933Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30430",
    "datePublished": "2025-03-31T22:23:50.933Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-01T19:39:13.322Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30432

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:13

Severity ?

6.4 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Summary

A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30432",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:24:13.710662Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:13:11.090Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:28.969Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30432",
    "datePublished": "2025-03-31T22:22:28.969Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-03T20:13:11.090Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24203

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:02

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24203",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:01:39.243398Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:02:14.564Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:18.620Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24203",
    "datePublished": "2025-03-31T22:24:18.620Z",
    "dateReserved": "2025-01-17T00:00:45.000Z",
    "dateUpdated": "2025-04-01T15:02:14.564Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24214

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 16:09

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24214",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T16:07:48.610305Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:09:27.579Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:01.477Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24214",
    "datePublished": "2025-03-31T22:24:01.477Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-01T16:09:27.579Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24215

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:00

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24215",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:59:03.877270Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:00:36.922Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:19.564Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24215",
    "datePublished": "2025-03-31T22:24:19.564Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-01T15:00:36.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24260

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:43

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker in a privileged position may be able to perform a denial-of-service.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24260",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:40:08.695044Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:43:06.830Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker in a privileged position may be able to perform a denial-of-service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker in a privileged position may be able to perform a denial-of-service",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:52.632Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24260",
    "datePublished": "2025-03-31T22:22:52.632Z",
    "dateReserved": "2025-01-17T00:00:45.015Z",
    "dateUpdated": "2025-04-01T14:43:06.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24248

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:21

Severity ?

5.0 (Medium) - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to enumerate devices that have signed into the user's Apple Account.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "ADJACENT_NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24248",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:20:32.327419Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:21:31.839Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to enumerate devices that have signed into the user\u0027s Apple Account."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to enumerate devices that have signed into the user\u0027s Apple Account",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:42.649Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24248",
    "datePublished": "2025-03-31T22:23:42.649Z",
    "dateReserved": "2025-01-17T00:00:45.009Z",
    "dateUpdated": "2025-04-01T18:21:31.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24178

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:27

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24178",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:25:56.064045Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:27:03.555Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:58.527Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24178",
    "datePublished": "2025-03-31T22:22:58.527Z",
    "dateReserved": "2025-01-17T00:00:44.992Z",
    "dateUpdated": "2025-04-01T14:27:03.555Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24265

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:25

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24265",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:24:40.759425Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:25:52.395Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:33.285Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24265",
    "datePublished": "2025-03-31T22:23:33.285Z",
    "dateReserved": "2025-01-17T00:00:45.016Z",
    "dateUpdated": "2025-04-01T13:25:52.395Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24240

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 15:05

Severity ?

4.7 (Medium) - CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24240",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:03:30.383788Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:05:43.411Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access user-sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:39.722Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24240",
    "datePublished": "2025-03-31T22:22:39.722Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-04-01T15:05:43.411Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24181

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:21

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:19:53.284054Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:21:02.108Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:01.317Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24181",
    "datePublished": "2025-03-31T22:23:01.317Z",
    "dateReserved": "2025-01-17T00:00:44.993Z",
    "dateUpdated": "2025-04-01T14:21:02.108Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24244

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:20

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted font may result in the disclosure of process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:51:19.936327Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:35.922Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted font may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted font may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:49.162Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24244",
    "datePublished": "2025-03-31T22:23:49.162Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-04-02T15:20:35.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24239

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:22

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24239",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:21:17.667265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:22:04.502Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:11.191Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24239",
    "datePublished": "2025-03-31T22:24:11.191Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-04-01T13:22:04.502Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24231

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:02

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24231",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:02:13.432180Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:02:55.946Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:11.608Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24231",
    "datePublished": "2025-03-31T22:23:11.608Z",
    "dateReserved": "2025-01-17T00:00:45.006Z",
    "dateUpdated": "2025-04-01T14:02:55.946Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30460

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:19

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30460",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:18:06.266251Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:19:14.841Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:40.811Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30460",
    "datePublished": "2025-03-31T22:23:40.811Z",
    "dateReserved": "2025-03-22T00:04:43.721Z",
    "dateUpdated": "2025-04-01T18:19:14.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24269

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24269",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:29:13.330870Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:30:12.108Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:27.144Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24269",
    "datePublished": "2025-03-31T22:23:27.144Z",
    "dateReserved": "2025-01-17T00:00:45.017Z",
    "dateUpdated": "2025-04-01T13:30:12.108Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-27113

Vulnerability from cvelistv5

Published

2025-02-18 00:00

Modified

2025-03-07 00:10

Severity ?

2.9 (Low) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Summary

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

References

▼	URL	Tags
	https://gitlab.gnome.org/GNOME/libxml2/-/issues/861

Impacted products

	Vendor	Product	Version
	xmlsoft	libxml2	Version: 0 ≤ Version: 2.13.0 ≤

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27113",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-19T15:33:43.940899Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-19T15:34:14.618Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-03-07T00:10:52.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250306-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "libxml2",
          "vendor": "xmlsoft",
          "versions": [
            {
              "lessThan": "2.12.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.6",
              "status": "affected",
              "version": "2.13.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.12.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.13.6",
                  "versionStartIncluding": "2.13.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T22:29:44.033Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/861"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2025-27113",
    "datePublished": "2025-02-18T00:00:00.000Z",
    "dateReserved": "2025-02-18T00:00:00.000Z",
    "dateUpdated": "2025-03-07T00:10:52.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30451

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:22

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:21:49.763959Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:22:18.686Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:05.623Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30451",
    "datePublished": "2025-03-31T22:24:05.623Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-01T04:22:18.686Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24247

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:22

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker may be able to cause unexpected app termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24247",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:21:46.895811Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:22:20.596Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker may be able to cause unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker may be able to cause unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:00.495Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24247",
    "datePublished": "2025-03-31T22:23:00.495Z",
    "dateReserved": "2025-01-17T00:00:45.009Z",
    "dateUpdated": "2025-04-01T14:22:20.596Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24272

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:08

Severity ?

6.8 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.8,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24272",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:07:29.343851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:08:29.601Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:37.022Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24272",
    "datePublished": "2025-03-31T22:23:37.022Z",
    "dateReserved": "2025-01-17T00:00:45.017Z",
    "dateUpdated": "2025-04-01T18:08:29.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30439

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:54

Severity ?

4.6 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An attacker with physical access to a locked device may be able to view sensitive user information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30439",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:53:15.437190Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:54:06.005Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An attacker with physical access to a locked device may be able to view sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with physical access to a locked device may be able to view sensitive user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:13.511Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30439",
    "datePublished": "2025-03-31T22:23:13.511Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-04-01T13:54:06.005Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24243

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 03:55

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24243",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:30.227Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted file may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:59.664Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24243",
    "datePublished": "2025-03-31T22:23:59.664Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-04-02T03:55:30.227Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24280

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:19

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

Version: unspecified < 14.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24280",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:19:27.835049Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:19:53.142Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access user-sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:07.706Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24280",
    "datePublished": "2025-03-31T22:24:07.706Z",
    "dateReserved": "2025-01-17T00:00:45.020Z",
    "dateUpdated": "2025-04-01T04:19:53.142Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30429

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:07

Severity ?

6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Summary

A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30429",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:06:37.390836Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:07:41.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:41.739Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30429",
    "datePublished": "2025-03-31T22:22:41.739Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-02T13:07:41.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24207

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:50

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to enable iCloud storage features without user consent.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:49:37.954837Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:50:23.641Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to enable iCloud storage features without user consent."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to enable iCloud storage features without user consent",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:16.238Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24207",
    "datePublished": "2025-03-31T22:23:16.238Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-04-01T20:50:23.641Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24256

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:45

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to disclose kernel memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 15.4

	Apple	macOS	Version: unspecified < 14.7
	Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24256",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:43:54.733352Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:45:20.982Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to disclose kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to disclose kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:43.629Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24256",
    "datePublished": "2025-03-31T22:22:43.629Z",
    "dateReserved": "2025-01-17T00:00:45.013Z",
    "dateUpdated": "2025-04-01T14:45:20.982Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24242

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:14

Severity ?

4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root privileges may be able to access private information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122373

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24242",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:08:41.737553Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-59",
                "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:14:54.806Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root privileges may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app with root privileges may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:20.418Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24242",
    "datePublished": "2025-03-31T22:24:20.418Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-04-01T13:14:54.806Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24257

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 13:17

Severity ?

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Summary

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to cause unexpected system termination or write kernel memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website