csaf_ncscnl - ncsc-2025-0103

ncsc-2025-0103

Vulnerability from csaf_ncscnl

Published

2025-04-01 08:42

Modified

2025-04-01 08:42

Summary

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Apple heeft meerdere kwetsbaarheden verholpen in iOS en iPadOS.

Interpretaties

De kwetsbaarheden omvatten onder andere geheugenbeheerproblemen, ongeautoriseerde toegang tot gevoelige gebruikersdata, en de mogelijkheid voor applicaties om hun sandbox-omgevingen te ontsnappen. Deze kwetsbaarheden konden leiden tot ongeautoriseerde toegang, gegevenswijzigingen, of zelfs Denial-of-Service. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren of link te volgen.

Oplossingen

Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-1025

Comparison Using Wrong Factors

CWE-697

Incorrect Comparison

CWE-125

Out-of-bounds Read

CWE-284

Improper Access Control

CWE-416

Use After Free

CWE-476

NULL Pointer Dereference

CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE-400

Uncontrolled Resource Consumption

CWE-863

Incorrect Authorization

CWE-787

Out-of-bounds Write

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-20

Improper Input Validation

CWE-276

Incorrect Default Permissions

CWE-275

CWE-770

Allocation of Resources Without Limits or Throttling

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft meerdere kwetsbaarheden verholpen in iOS en iPadOS.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten onder andere geheugenbeheerproblemen, ongeautoriseerde toegang tot gevoelige gebruikersdata, en de mogelijkheid voor applicaties om hun sandbox-omgevingen te ontsnappen. Deze kwetsbaarheden konden leiden tot ongeautoriseerde toegang, gegevenswijzigingen, of zelfs Denial-of-Service. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren of link te volgen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Comparison Using Wrong Factors",
        "title": "CWE-1025"
      },
      {
        "category": "general",
        "text": "Incorrect Comparison",
        "title": "CWE-697"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
        "title": "CWE-94"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Incorrect Authorization",
        "title": "CWE-863"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Incorrect Default Permissions",
        "title": "CWE-276"
      },
      {
        "category": "general",
        "text": "CWE-275",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://support.apple.com/en-us/122345"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://support.apple.com/en-us/122346"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://support.apple.com/en-us/122372"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://support.apple.com/en-us/122371"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
    "tracking": {
      "current_release_date": "2025-04-01T08:42:27.059536Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0103",
      "initial_release_date": "2025-04-01T08:42:27.059536Z",
      "revision_history": [
        {
          "date": "2025-04-01T08:42:27.059536Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/16.7.11",
                "product": {
                  "name": "vers:apple/16.7.11",
                  "product_id": "CSAFPID-2588450"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.2",
                "product": {
                  "name": "vers:apple/18.2",
                  "product_id": "CSAFPID-1432307"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.3",
                "product": {
                  "name": "vers:apple/18.3",
                  "product_id": "CSAFPID-1902947"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.3.2",
                "product": {
                  "name": "vers:apple/18.3.2",
                  "product_id": "CSAFPID-2462478"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.4",
                "product": {
                  "name": "vers:apple/18.4",
                  "product_id": "CSAFPID-2588454"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.2",
                "product": {
                  "name": "vers:unknown/\u003c18.2",
                  "product_id": "CSAFPID-1436912"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.3",
                "product": {
                  "name": "vers:unknown/\u003c18.3",
                  "product_id": "CSAFPID-1904380"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.3.1",
                "product": {
                  "name": "vers:unknown/\u003c18.3.1",
                  "product_id": "CSAFPID-2177846"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.3.2",
                "product": {
                  "name": "vers:unknown/\u003c18.3.2",
                  "product_id": "CSAFPID-2469033"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/15.8.4",
                "product": {
                  "name": "vers:apple/15.8.4",
                  "product_id": "CSAFPID-2588452"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/unknown",
                "product": {
                  "name": "vers:unknown/unknown",
                  "product_id": "CSAFPID-1332226"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c18.2",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c18.2",
                  "product_id": "CSAFPID-1432291"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c18.3",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c18.3",
                  "product_id": "CSAFPID-1901367"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c18.4",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c18.4",
                  "product_id": "CSAFPID-2590080"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS and iPadOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.0",
                "product": {
                  "name": "vers:unknown/15.0",
                  "product_id": "CSAFPID-90190",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.1",
                "product": {
                  "name": "vers:unknown/15.1",
                  "product_id": "CSAFPID-90119"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.2",
                "product": {
                  "name": "vers:unknown/15.2",
                  "product_id": "CSAFPID-90182"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.3",
                "product": {
                  "name": "vers:unknown/15.3",
                  "product_id": "CSAFPID-773820"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.4",
                "product": {
                  "name": "vers:unknown/15.4",
                  "product_id": "CSAFPID-90174"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.5",
                "product": {
                  "name": "vers:unknown/15.5",
                  "product_id": "CSAFPID-90216"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.6",
                "product": {
                  "name": "vers:unknown/15.6",
                  "product_id": "CSAFPID-90200"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.7",
                "product": {
                  "name": "vers:unknown/15.7",
                  "product_id": "CSAFPID-90232"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.8",
                "product": {
                  "name": "vers:unknown/15.8",
                  "product_id": "CSAFPID-90303"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.8.1",
                "product": {
                  "name": "vers:unknown/15.8.1",
                  "product_id": "CSAFPID-821264"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0",
                "product": {
                  "name": "vers:unknown/16.0",
                  "product_id": "CSAFPID-90255"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.1",
                "product": {
                  "name": "vers:unknown/16.1",
                  "product_id": "CSAFPID-90236"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.2",
                "product": {
                  "name": "vers:unknown/16.2",
                  "product_id": "CSAFPID-90241"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.3",
                "product": {
                  "name": "vers:unknown/16.3",
                  "product_id": "CSAFPID-90305"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.4",
                "product": {
                  "name": "vers:unknown/16.4",
                  "product_id": "CSAFPID-90301"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.5",
                "product": {
                  "name": "vers:unknown/16.5",
                  "product_id": "CSAFPID-90297"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.6",
                "product": {
                  "name": "vers:unknown/16.6",
                  "product_id": "CSAFPID-90295"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.7",
                "product": {
                  "name": "vers:unknown/16.7",
                  "product_id": "CSAFPID-90291"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.0",
                "product": {
                  "name": "vers:unknown/17.0",
                  "product_id": "CSAFPID-90302",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.1",
                "product": {
                  "name": "vers:unknown/17.1",
                  "product_id": "CSAFPID-90306"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.2",
                "product": {
                  "name": "vers:unknown/17.2",
                  "product_id": "CSAFPID-90307"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.3",
                "product": {
                  "name": "vers:unknown/17.3",
                  "product_id": "CSAFPID-90308"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.4",
                "product": {
                  "name": "vers:unknown/17.4",
                  "product_id": "CSAFPID-1077909"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.5",
                "product": {
                  "name": "vers:unknown/17.5",
                  "product_id": "CSAFPID-1136180"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.6",
                "product": {
                  "name": "vers:unknown/17.6",
                  "product_id": "CSAFPID-1136554"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.7",
                "product": {
                  "name": "vers:unknown/17.7",
                  "product_id": "CSAFPID-1136185"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.0",
                "product": {
                  "name": "vers:unknown/18.0",
                  "product_id": "CSAFPID-1161343",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.1",
                "product": {
                  "name": "vers:unknown/18.1",
                  "product_id": "CSAFPID-1443657"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.2",
                "product": {
                  "name": "vers:unknown/18.2",
                  "product_id": "CSAFPID-1906294"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.3",
                "product": {
                  "name": "vers:unknown/18.3",
                  "product_id": "CSAFPID-1987760"
                }
              }
            ],
            "category": "product_name",
            "name": "iPhone OS"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:apple/18.2",
                    "product": {
                      "name": "vers:apple/18.2",
                      "product_id": "CSAFPID-1618595"
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:apple/18.3",
                    "product": {
                      "name": "vers:apple/18.3",
                      "product_id": "CSAFPID-1915327"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Iphone Os"
              }
            ],
            "category": "product_family",
            "name": "Apple"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-24217",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24217",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24217.json"
        }
      ],
      "title": "CVE-2025-24217"
    },
    {
      "cve": "CVE-2025-24221",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24221",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24221.json"
        }
      ],
      "title": "CVE-2025-24221"
    },
    {
      "cve": "CVE-2025-24230",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24230",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24230.json"
        }
      ],
      "title": "CVE-2025-24230"
    },
    {
      "cve": "CVE-2025-24237",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24237",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24237.json"
        }
      ],
      "title": "CVE-2025-24237"
    },
    {
      "cve": "CVE-2025-24238",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24238",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24238.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24238"
    },
    {
      "cve": "CVE-2025-24243",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
          "title": "CWE-94"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24243",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24243.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24243"
    },
    {
      "cve": "CVE-2025-24244",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24244",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24244.json"
        }
      ],
      "title": "CVE-2025-24244"
    },
    {
      "cve": "CVE-2025-24257",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24257",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24257.json"
        }
      ],
      "title": "CVE-2025-24257"
    },
    {
      "cve": "CVE-2025-24264",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24264",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24264.json"
        }
      ],
      "title": "CVE-2025-24264"
    },
    {
      "cve": "CVE-2025-24283",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24283",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24283.json"
        }
      ],
      "title": "CVE-2025-24283"
    },
    {
      "cve": "CVE-2025-27113",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27113",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27113.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-27113"
    },
    {
      "cve": "CVE-2025-30425",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30425",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30425.json"
        }
      ],
      "title": "CVE-2025-30425"
    },
    {
      "cve": "CVE-2025-30426",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30426",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30426.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30426"
    },
    {
      "cve": "CVE-2025-30427",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30427",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30427.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30427"
    },
    {
      "cve": "CVE-2025-30428",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30428",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30428.json"
        }
      ],
      "title": "CVE-2025-30428"
    },
    {
      "cve": "CVE-2025-30429",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30429",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30429.json"
        }
      ],
      "title": "CVE-2025-30429"
    },
    {
      "cve": "CVE-2025-30430",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30430",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30430.json"
        }
      ],
      "title": "CVE-2025-30430"
    },
    {
      "cve": "CVE-2025-30432",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30432",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30432.json"
        }
      ],
      "title": "CVE-2025-30432"
    },
    {
      "cve": "CVE-2025-30433",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30433",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30433.json"
        }
      ],
      "title": "CVE-2025-30433"
    },
    {
      "cve": "CVE-2025-30434",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30434",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30434.json"
        }
      ],
      "title": "CVE-2025-30434"
    },
    {
      "cve": "CVE-2025-30438",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30438",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30438.json"
        }
      ],
      "title": "CVE-2025-30438"
    },
    {
      "cve": "CVE-2025-30439",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30439",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30439.json"
        }
      ],
      "title": "CVE-2025-30439"
    },
    {
      "cve": "CVE-2025-30447",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30447",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30447.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30447"
    },
    {
      "cve": "CVE-2025-30454",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30454",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30454.json"
        }
      ],
      "title": "CVE-2025-30454"
    },
    {
      "cve": "CVE-2025-30456",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30456",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30456.json"
        }
      ],
      "title": "CVE-2025-30456"
    },
    {
      "cve": "CVE-2025-30463",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30463",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30463.json"
        }
      ],
      "title": "CVE-2025-30463"
    },
    {
      "cve": "CVE-2025-30465",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30465",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30465.json"
        }
      ],
      "title": "CVE-2025-30465"
    },
    {
      "cve": "CVE-2025-30467",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30467",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30467.json"
        }
      ],
      "title": "CVE-2025-30467"
    },
    {
      "cve": "CVE-2025-30469",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30469",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30469.json"
        }
      ],
      "title": "CVE-2025-30469"
    },
    {
      "cve": "CVE-2025-30470",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30470",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30470.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30470"
    },
    {
      "cve": "CVE-2025-30471",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30471",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30471.json"
        }
      ],
      "title": "CVE-2025-30471"
    },
    {
      "cve": "CVE-2025-31182",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31182.json"
        }
      ],
      "title": "CVE-2025-31182"
    },
    {
      "cve": "CVE-2025-31183",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31183",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31183.json"
        }
      ],
      "title": "CVE-2025-31183"
    },
    {
      "cve": "CVE-2025-31184",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31184",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31184.json"
        }
      ],
      "title": "CVE-2025-31184"
    },
    {
      "cve": "CVE-2025-31191",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31191",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31191.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-31191"
    },
    {
      "cve": "CVE-2025-31192",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31192.json"
        }
      ],
      "title": "CVE-2025-31192"
    },
    {
      "cve": "CVE-2024-9681",
      "cwe": {
        "id": "CWE-1025",
        "name": "Comparison Using Wrong Factors"
      },
      "notes": [
        {
          "category": "other",
          "text": "Comparison Using Wrong Factors",
          "title": "CWE-1025"
        },
        {
          "category": "other",
          "text": "Incorrect Comparison",
          "title": "CWE-697"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-9681",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-9681.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-9681"
    },
    {
      "cve": "CVE-2024-48958",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-48958",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-48958.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-48958"
    },
    {
      "cve": "CVE-2024-54502",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54502",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54502.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-54502"
    },
    {
      "cve": "CVE-2024-54508",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54508",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54508.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-54508"
    },
    {
      "cve": "CVE-2024-54534",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54534",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
        }
      ],
      "title": "CVE-2024-54534"
    },
    {
      "cve": "CVE-2024-54543",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54543",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54543.json"
        }
      ],
      "title": "CVE-2024-54543"
    },
    {
      "cve": "CVE-2024-56171",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-56171",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-56171.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-56171"
    },
    {
      "cve": "CVE-2025-24085",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24085",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24085.json"
        }
      ],
      "title": "CVE-2025-24085"
    },
    {
      "cve": "CVE-2025-24095",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24095",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24095.json"
        }
      ],
      "title": "CVE-2025-24095"
    },
    {
      "cve": "CVE-2025-24097",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24097",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24097.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24097"
    },
    {
      "cve": "CVE-2025-24113",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24113",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24113.json"
        }
      ],
      "title": "CVE-2025-24113"
    },
    {
      "cve": "CVE-2025-24163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24163",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24163.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24163"
    },
    {
      "cve": "CVE-2025-24167",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24167",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24167.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24167"
    },
    {
      "cve": "CVE-2025-24173",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24173",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24173.json"
        }
      ],
      "title": "CVE-2025-24173"
    },
    {
      "cve": "CVE-2025-24178",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24178",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24178.json"
        }
      ],
      "title": "CVE-2025-24178"
    },
    {
      "cve": "CVE-2025-24180",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24180",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24180.json"
        }
      ],
      "title": "CVE-2025-24180"
    },
    {
      "cve": "CVE-2025-24182",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24182.json"
        }
      ],
      "title": "CVE-2025-24182"
    },
    {
      "cve": "CVE-2025-24190",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24190",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24190.json"
        }
      ],
      "title": "CVE-2025-24190"
    },
    {
      "cve": "CVE-2025-24192",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24192.json"
        }
      ],
      "title": "CVE-2025-24192"
    },
    {
      "cve": "CVE-2025-24193",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24193",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24193.json"
        }
      ],
      "title": "CVE-2025-24193"
    },
    {
      "cve": "CVE-2025-24194",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24194",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24194.json"
        }
      ],
      "title": "CVE-2025-24194"
    },
    {
      "cve": "CVE-2025-24198",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24198",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24198.json"
        }
      ],
      "title": "CVE-2025-24198"
    },
    {
      "cve": "CVE-2025-24200",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24200",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24200.json"
        }
      ],
      "title": "CVE-2025-24200"
    },
    {
      "cve": "CVE-2025-24201",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24201",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24201.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24201"
    },
    {
      "cve": "CVE-2025-24202",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24202",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24202.json"
        }
      ],
      "title": "CVE-2025-24202"
    },
    {
      "cve": "CVE-2025-24203",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24203",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24203.json"
        }
      ],
      "title": "CVE-2025-24203"
    },
    {
      "cve": "CVE-2025-24205",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24205",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24205.json"
        }
      ],
      "title": "CVE-2025-24205"
    },
    {
      "cve": "CVE-2025-24208",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24208",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24208.json"
        }
      ],
      "title": "CVE-2025-24208"
    },
    {
      "cve": "CVE-2025-24209",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24209",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24209.json"
        }
      ],
      "title": "CVE-2025-24209"
    },
    {
      "cve": "CVE-2025-24210",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24210",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24210.json"
        }
      ],
      "title": "CVE-2025-24210"
    },
    {
      "cve": "CVE-2025-24211",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24211",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24211.json"
        }
      ],
      "title": "CVE-2025-24211"
    },
    {
      "cve": "CVE-2025-24212",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24212",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24212.json"
        }
      ],
      "title": "CVE-2025-24212"
    },
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24213",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24213.json"
        }
      ],
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24214",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24214",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24214.json"
        }
      ],
      "title": "CVE-2025-24214"
    },
    {
      "cve": "CVE-2025-24215",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24215",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24215.json"
        }
      ],
      "title": "CVE-2025-24215"
    },
    {
      "cve": "CVE-2025-24216",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24216",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24216.json"
        }
      ],
      "title": "CVE-2025-24216"
    }
  ]
}

CVE-2025-30447 (GCVE-0-2025-30447)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:15

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to access sensitive user data

Summary

The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30447",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:18:28.221128Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:18:57.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:15:11.386Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:08.637Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30447",
    "datePublished": "2025-03-31T22:24:08.637Z",
    "dateReserved": "2025-03-22T00:04:43.719Z",
    "dateUpdated": "2025-11-03T21:15:11.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30428 (GCVE-0-2025-30428)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:13

Severity ?

5.4 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

CWE

Photos in the Hidden Photos Album may be viewed without authentication

Summary

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

iPadOS

Version: unspecified < 17.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "LOW",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30428",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:16:04.786580Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-305",
                "description": "CWE-305 Authentication Bypass by Primary Weakness",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:14:48.945Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:13:57.909Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Photos in the Hidden Photos Album may be viewed without authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:34.013Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30428",
    "datePublished": "2025-03-31T22:22:34.013Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:13:57.909Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24095 (GCVE-0-2025-24095)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:00

Severity ?

7.6 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

CWE

An app may be able to bypass Privacy preferences

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

visionOS

Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.6,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24095",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:11:43.517993Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-288",
                "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:16:56.303Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:00:55.812Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to bypass Privacy preferences",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:36.818Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24095",
    "datePublished": "2025-03-31T22:22:36.818Z",
    "dateReserved": "2025-01-17T00:00:44.967Z",
    "dateUpdated": "2025-11-03T21:00:55.812Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30467 (GCVE-0-2025-30467)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:16

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE

Visiting a malicious website may lead to address bar spoofing

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30467",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:24:28.140256Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-451",
                "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:26:37.878Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:14.814Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to address bar spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:52.835Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30467",
    "datePublished": "2025-03-31T22:23:52.835Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-11-03T21:16:14.814Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30456 (GCVE-0-2025-30456)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:15

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

An app may be able to gain root privileges

Summary

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30456",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:32.610940Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "CWE-281 Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T17:45:45.180Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:15:42.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:45.632Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30456",
    "datePublished": "2025-03-31T22:23:45.632Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-11-03T21:15:42.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-31183 (GCVE-0-2025-31183)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:16

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

An app may be able to access sensitive user data

Summary

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31183",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:48:30.897543Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:49:56.649Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:47.455Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:19.820Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31183",
    "datePublished": "2025-03-31T22:23:19.820Z",
    "dateReserved": "2025-03-27T16:13:58.311Z",
    "dateUpdated": "2025-11-03T21:16:47.455Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24210 (GCVE-0-2025-24210)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:08

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

Parsing an image may lead to disclosure of user information

Summary

A logic error was addressed with improved error handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Parsing an image may lead to disclosure of user information.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24210",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:23:05.463704Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-783",
                "description": "CWE-783 Operator Precedence Logic Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:25:02.925Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:13.262Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic error was addressed with improved error handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Parsing an image may lead to disclosure of user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Parsing an image may lead to disclosure of user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:59.513Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24210",
    "datePublished": "2025-03-31T22:22:59.513Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-11-03T21:08:13.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-54534 (GCVE-0-2024-54534)

Vulnerability from cvelistv5

Published

2024-12-11 22:58

Modified

2025-11-03 22:32

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing maliciously crafted web content may lead to memory corruption

Summary

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.

References

URL

Tags

	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54534",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-20T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-21T04:56:02.918Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:32:22.994Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250418-0002/"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/7"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T22:58:39.974Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54534",
    "datePublished": "2024-12-11T22:58:39.974Z",
    "dateReserved": "2024-12-03T22:50:35.511Z",
    "dateUpdated": "2025-11-03T22:32:22.994Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-9681 (GCVE-0-2024-9681)

Vulnerability from cvelistv5

Published

2024-11-06 07:47

Modified

2025-11-03 20:56

Severity ?

5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-1025 Comparison Using Wrong Factors

Summary

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host. (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.) When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache. The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended.

References

URL

Tags

	https://curl.se/docs/CVE-2024-9681.json
	https://curl.se/docs/CVE-2024-9681.html
	https://hackerone.com/reports/2764830

Impacted products

	Vendor	Product	Version
	curl	curl	Version: 8.10.1 ≤ 8.10.1 Version: 8.10.0 ≤ 8.10.0 Version: 8.9.1 ≤ 8.9.1 Version: 8.9.0 ≤ 8.9.0 Version: 8.8.0 ≤ 8.8.0 Version: 8.7.1 ≤ 8.7.1 Version: 8.7.0 ≤ 8.7.0 Version: 8.6.0 ≤ 8.6.0 Version: 8.5.0 ≤ 8.5.0 Version: 8.4.0 ≤ 8.4.0 Version: 8.3.0 ≤ 8.3.0 Version: 8.2.1 ≤ 8.2.1 Version: 8.2.0 ≤ 8.2.0 Version: 8.1.2 ≤ 8.1.2 Version: 8.1.1 ≤ 8.1.1 Version: 8.1.0 ≤ 8.1.0 Version: 8.0.1 ≤ 8.0.1 Version: 8.0.0 ≤ 8.0.0 Version: 7.88.1 ≤ 7.88.1 Version: 7.88.0 ≤ 7.88.0 Version: 7.87.0 ≤ 7.87.0 Version: 7.86.0 ≤ 7.86.0 Version: 7.85.0 ≤ 7.85.0 Version: 7.84.0 ≤ 7.84.0 Version: 7.83.1 ≤ 7.83.1 Version: 7.83.0 ≤ 7.83.0 Version: 7.82.0 ≤ 7.82.0 Version: 7.81.0 ≤ 7.81.0 Version: 7.80.0 ≤ 7.80.0 Version: 7.79.1 ≤ 7.79.1 Version: 7.79.0 ≤ 7.79.0 Version: 7.78.0 ≤ 7.78.0 Version: 7.77.0 ≤ 7.77.0 Version: 7.76.1 ≤ 7.76.1 Version: 7.76.0 ≤ 7.76.0 Version: 7.75.0 ≤ 7.75.0 Version: 7.74.0 ≤ 7.74.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:56:39.087Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/11/06/2"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241213-0006/"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "curl",
            "vendor": "curl",
            "versions": [
              {
                "lessThan": "7.74.0",
                "status": "unaffected",
                "version": "0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "8.10.1",
                "status": "affected",
                "version": "7.74.0",
                "versionType": "semver"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8.11.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T16:16:59.652768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:09:00.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.80.0",
              "status": "affected",
              "version": "7.80.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.1",
              "status": "affected",
              "version": "7.79.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.0",
              "status": "affected",
              "version": "7.79.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.78.0",
              "status": "affected",
              "version": "7.78.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.77.0",
              "status": "affected",
              "version": "7.77.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.1",
              "status": "affected",
              "version": "7.76.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.0",
              "status": "affected",
              "version": "7.76.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.75.0",
              "status": "affected",
              "version": "7.75.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.74.0",
              "status": "affected",
              "version": "7.74.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "newfunction"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Stenberg"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl\u0027s HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1025 Comparison Using Wrong Factors",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-06T07:47:20.162Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "name": "json",
          "url": "https://curl.se/docs/CVE-2024-9681.json"
        },
        {
          "name": "www",
          "url": "https://curl.se/docs/CVE-2024-9681.html"
        },
        {
          "name": "issue",
          "url": "https://hackerone.com/reports/2764830"
        }
      ],
      "title": "HSTS subdomain overwrites parent cache entry"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2024-9681",
    "datePublished": "2024-11-06T07:47:20.162Z",
    "dateReserved": "2024-10-09T07:57:47.318Z",
    "dateUpdated": "2025-11-03T20:56:39.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24217 (GCVE-0-2025-24217)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:09

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

An app may be able to access sensitive user data

Summary

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

	Apple	iOS and iPadOS	Version: unspecified < 18.4
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24217",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:49:50.330155Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:50:44.832Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:09:03.684Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:40.756Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24217",
    "datePublished": "2025-03-31T22:22:40.756Z",
    "dateReserved": "2025-01-17T00:00:45.003Z",
    "dateUpdated": "2025-11-03T21:09:03.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30471 (GCVE-0-2025-30471)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:16

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

A remote user may be able to cause a denial-of-service

Summary

A validation issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote user may be able to cause a denial-of-service.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30471",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:48:41.140539Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:52:14.967Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:33.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A validation issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote user may be able to cause a denial-of-service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote user may be able to cause a denial-of-service",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:53.668Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30471",
    "datePublished": "2025-03-31T22:23:53.668Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-11-03T21:16:33.392Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30426 (GCVE-0-2025-30426)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:13

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

An app may be able to enumerate a user's installed apps

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user's installed apps.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30426",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:29:36.628442Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:30:14.110Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:13:46.624Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user\u0027s installed apps."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to enumerate a user\u0027s installed apps",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:55.589Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30426",
    "datePublished": "2025-03-31T22:23:55.589Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:13:46.624Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24264 (GCVE-0-2025-24264)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:11

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Processing maliciously crafted web content may lead to an unexpected Safari crash

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24264",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:17:25.800640Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:18:17.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:11:45.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:36.148Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24264",
    "datePublished": "2025-03-31T22:23:36.148Z",
    "dateReserved": "2025-01-17T00:00:45.016Z",
    "dateUpdated": "2025-11-03T21:11:45.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30427 (GCVE-0-2025-30427)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:13

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE

Processing maliciously crafted web content may lead to an unexpected Safari crash

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30427",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:18:38.091976Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:18:41.175Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:13:55.087Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:24.350Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30427",
    "datePublished": "2025-03-31T22:24:24.350Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:13:55.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24097 (GCVE-0-2025-24097)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:01

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to read arbitrary file metadata

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to read arbitrary file metadata.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24097",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:22:50.277186Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:23:27.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:01:04.515Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/6"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to read arbitrary file metadata."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read arbitrary file metadata",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:00.602Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24097",
    "datePublished": "2025-03-31T22:24:00.602Z",
    "dateReserved": "2025-01-17T00:00:44.967Z",
    "dateUpdated": "2025-11-03T21:01:04.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-27113 (GCVE-0-2025-27113)

Vulnerability from cvelistv5

Published

2025-02-18 00:00

Modified

2025-11-03 21:13

Severity ?

2.9 (Low) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-476 - NULL Pointer Dereference

Summary

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

References

URL

Tags

https://gitlab.gnome.org/GNOME/libxml2/-/issues/861

Impacted products

	Vendor	Product	Version
	xmlsoft	libxml2	Version: 0 ≤ Version: 2.13.0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27113",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-19T15:33:43.940899Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-19T15:34:14.618Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:13:22.434Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250306-0004/"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "libxml2",
          "vendor": "xmlsoft",
          "versions": [
            {
              "lessThan": "2.12.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.6",
              "status": "affected",
              "version": "2.13.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.12.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.13.6",
                  "versionStartIncluding": "2.13.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T22:29:44.033Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/861"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2025-27113",
    "datePublished": "2025-02-18T00:00:00.000Z",
    "dateReserved": "2025-02-18T00:00:00.000Z",
    "dateUpdated": "2025-11-03T21:13:22.434Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30433 (GCVE-0-2025-30433)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:14

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

A shortcut may be able to access files that are normally inaccessible to the Shortcuts app

Summary

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30433",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:33:03.281567Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:33:37.358Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:14:28.934Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:47.415Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30433",
    "datePublished": "2025-03-31T22:22:47.415Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:14:28.934Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24113 (GCVE-0-2025-24113)

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-11-03 21:01

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE

Visiting a malicious website may lead to user interface spoofing

Summary

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing.

References

URL

Tags

	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122074
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

Apple

visionOS

Version: unspecified < 2.3

Apple	macOS	Version: unspecified < 15.3
Apple	Safari	Version: unspecified < 18.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24113",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-30T21:31:48.960842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-31T21:40:20.048Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:01:50.494Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/20"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/15"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to user interface spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:26.736Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122074"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24113",
    "datePublished": "2025-01-27T21:45:26.736Z",
    "dateReserved": "2025-01-17T00:00:44.970Z",
    "dateUpdated": "2025-11-03T21:01:50.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24211 (GCVE-0-2025-24211)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:08

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory

Summary

This issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:50:59.364265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:51:42.514Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:23.455Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:15.300Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24211",
    "datePublished": "2025-03-31T22:23:15.300Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-11-03T21:08:23.455Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-31184 (GCVE-0-2025-31184)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:16

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

An app may gain unauthorized access to Local Network

Summary

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31184",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T18:29:16.861062Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "CWE-281 Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T18:29:55.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:53.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may gain unauthorized access to Local Network",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:32.148Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31184",
    "datePublished": "2025-03-31T22:22:32.148Z",
    "dateReserved": "2025-03-27T16:13:58.311Z",
    "dateUpdated": "2025-11-03T21:16:53.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-31191 (GCVE-0-2025-31191)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:17

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to access sensitive user data

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31191",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:16:29.373173Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:17:04.790Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:17:09.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:10.313Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31191",
    "datePublished": "2025-03-31T22:24:10.313Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-11-03T21:17:09.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24085 (GCVE-0-2025-24085)

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-11-12 14:34

Severity ?

10.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE

A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

References

URL

Tags

	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122072
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122071
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

Apple

visionOS

Version: unspecified < 2.3

Apple	tvOS	Version: unspecified < 18.3
Apple	macOS	Version: unspecified < 15.3
Apple	watchOS	Version: unspecified < 11.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 10,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24085",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-12T14:34:35.911745Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-01-29",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24085"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-12T14:34:38.795Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24085"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-11T15:07:42.394Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Oct/30"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Oct/31"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Oct/23"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Oct/1"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jun/19"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/19"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/15"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/12"
          },
          {
            "url": "https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:46.555Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122072"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122071"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24085",
    "datePublished": "2025-01-27T21:45:46.555Z",
    "dateReserved": "2025-01-17T00:00:44.965Z",
    "dateUpdated": "2025-11-12T14:34:38.795Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24200 (GCVE-0-2025-24200)

Vulnerability from cvelistv5

Published

2025-02-10 19:04

Modified

2025-11-03 21:07

Severity ?

6.1 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Summary

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

References

URL

Tags

	https://support.apple.com/en-us/122173
	https://support.apple.com/en-us/122174

Impacted products

Vendor

Product

Version

Apple

iPadOS

Version: unspecified < 17.7

Apple

iOS and iPadOS

Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:31.682Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Feb/7"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Feb/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/7"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24200",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-13T04:55:19.603091Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-02-12",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24200"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:55:29.941Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24200"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2025-02-12T00:00:00+00:00",
            "value": "CVE-2025-24200 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-10T19:04:45.242Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122173"
        },
        {
          "url": "https://support.apple.com/en-us/122174"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24200",
    "datePublished": "2025-02-10T19:04:45.242Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-11-03T21:07:31.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24193 (GCVE-0-2025-24193)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:07

Severity ?

2.4 (Low) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos

Summary

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos.

References

URL

Tags

https://support.apple.com/en-us/122371

Impacted products

	Vendor	Product	Version
	Apple	iOS and iPadOS	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 2.4,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24193",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:59:27.308700Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:01:01.647Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:06.740Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:03.607Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24193",
    "datePublished": "2025-03-31T22:24:03.607Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-11-03T21:07:06.740Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24243 (GCVE-0-2025-24243)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:10

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing a maliciously crafted file may lead to arbitrary code execution

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted file may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24243",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:30.227Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:10:32.674Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted file may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:59.664Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24243",
    "datePublished": "2025-03-31T22:23:59.664Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-11-03T21:10:32.674Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24205 (GCVE-0-2025-24205)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:07

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to access user-sensitive data

Summary

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24205",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:53:06.180161Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:47.576Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:49.667Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access user-sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:47.476Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24205",
    "datePublished": "2025-03-31T22:23:47.476Z",
    "dateReserved": "2025-01-17T00:00:45.000Z",
    "dateUpdated": "2025-11-03T21:07:49.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24201 (GCVE-0-2025-24201)

Vulnerability from cvelistv5

Published

2025-03-11 18:07

Modified

2025-11-12 14:34

Severity ?

10.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE

Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)

Summary

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

References

URL

Tags

	https://support.apple.com/en-us/122281
	https://support.apple.com/en-us/122283
	https://support.apple.com/en-us/122284
	https://support.apple.com/en-us/122285
	https://support.apple.com/en-us/122376
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122346
	https://support.apple.com/en-us/122345

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.3

Apple	macOS	Version: unspecified < 15.3
Apple	visionOS	Version: unspecified < 2.3
Apple	Safari	Version: unspecified < 18.3
Apple	watchOS	Version: unspecified < 11.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	iOS and iPadOS	Version: unspecified < 16.7
Apple	iOS and iPadOS	Version: unspecified < 15.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 10,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24201",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-12T14:31:38.579620Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-03-13",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-12T14:34:01.244Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-11T15:06:10.768Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/2"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/3"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/16"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Oct/31"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Oct/1"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jun/19"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/7"
          },
          {
            "url": "https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-11T13:12:38.809Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122281"
        },
        {
          "url": "https://support.apple.com/en-us/122283"
        },
        {
          "url": "https://support.apple.com/en-us/122284"
        },
        {
          "url": "https://support.apple.com/en-us/122285"
        },
        {
          "url": "https://support.apple.com/en-us/122376"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122346"
        },
        {
          "url": "https://support.apple.com/en-us/122345"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24201",
    "datePublished": "2025-03-11T18:07:21.848Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-11-12T14:34:01.244Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30438 (GCVE-0-2025-30438)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:14

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started

Summary

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30438",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:13.391417Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:23:06.883Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:14:41.734Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://support.apple.com/en-us/122376"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:02.346Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30438",
    "datePublished": "2025-03-31T22:23:02.346Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-11-03T21:14:41.734Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30470 (GCVE-0-2025-30470)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:16

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to read sensitive location information

Summary

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to read sensitive location information.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30470",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:01:05.904338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:02:51.380Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:23.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to read sensitive location information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read sensitive location information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:25.184Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30470",
    "datePublished": "2025-03-31T22:24:25.184Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-11-03T21:16:23.355Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24216 (GCVE-0-2025-24216)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:08

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE

Processing maliciously crafted web content may lead to an unexpected Safari crash

Summary

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24216",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:13:08.369709Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-508",
                "description": "CWE-508 Non-Replicating Malicious Code",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:16:06.043Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:59.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:35.858Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24216",
    "datePublished": "2025-03-31T22:22:35.858Z",
    "dateReserved": "2025-01-17T00:00:45.003Z",
    "dateUpdated": "2025-11-03T21:08:59.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-31192 (GCVE-0-2025-31192)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:17

Severity ?

6.7 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

CWE

A website may be able to access sensor information without user consent

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:17:45.905890Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-305",
                "description": "CWE-305 Authentication Bypass by Primary Weakness",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:13:57.590Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:17:13.283Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to access sensor information without user consent",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:30.090Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31192",
    "datePublished": "2025-03-31T22:22:30.090Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-11-03T21:17:13.283Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24180 (GCVE-0-2025-24180)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:06

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE

A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix

Summary

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24180",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:56:02.656511Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-601",
                "description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:00:32.367Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:06:38.979Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:12.556Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24180",
    "datePublished": "2025-03-31T22:23:12.556Z",
    "dateReserved": "2025-01-17T00:00:44.993Z",
    "dateUpdated": "2025-11-03T21:06:38.979Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24167 (GCVE-0-2025-24167)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:05

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

A download's origin may be incorrectly associated

Summary

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A download's origin may be incorrectly associated.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24167",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T03:58:17.736372Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T03:59:52.460Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:05:51.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A download\u0027s origin may be incorrectly associated."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A download\u0027s origin may be incorrectly associated",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:26.043Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24167",
    "datePublished": "2025-03-31T22:24:26.043Z",
    "dateReserved": "2025-01-17T00:00:44.989Z",
    "dateUpdated": "2025-11-03T21:05:51.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24178 (GCVE-0-2025-24178)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:06

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

An app may be able to break out of its sandbox

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24178",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:25:56.064045Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:27:03.555Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:06:33.477Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:58.527Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24178",
    "datePublished": "2025-03-31T22:22:58.527Z",
    "dateReserved": "2025-01-17T00:00:44.992Z",
    "dateUpdated": "2025-11-03T21:06:33.477Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30432 (GCVE-0-2025-30432)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:14

Severity ?

6.4 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

CWE

A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures

Summary

A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30432",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:24:13.710662Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:13:11.090Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:14:20.515Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:28.969Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30432",
    "datePublished": "2025-03-31T22:22:28.969Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:14:20.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30465 (GCVE-0-2025-30465)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:16

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

A shortcut may be able to access files that are normally inaccessible to the Shortcuts app

Summary

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

References

URL

Tags

	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30465",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:28:51.335100Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T14:31:06.035Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:10.669Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:27.093Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30465",
    "datePublished": "2025-03-31T22:22:27.093Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-11-03T21:16:10.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24230 (GCVE-0-2025-24230)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:09

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Playing a malicious audio file may lead to an unexpected app termination

Summary

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Playing a malicious audio file may lead to an unexpected app termination.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24230",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:21:06.127067Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:21:39.430Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:09:29.374Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Playing a malicious audio file may lead to an unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Playing a malicious audio file may lead to an unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:03.205Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24230",
    "datePublished": "2025-03-31T22:23:03.205Z",
    "dateReserved": "2025-01-17T00:00:45.005Z",
    "dateUpdated": "2025-11-03T21:09:29.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24202 (GCVE-0-2025-24202)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:07

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to access sensitive user data

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

macOS

Version: unspecified < 15.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24202",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T16:01:38.802033Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:07:22.477Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:35.899Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:02.678Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24202",
    "datePublished": "2025-03-31T22:24:02.678Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-11-03T21:07:35.899Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24209 (GCVE-0-2025-24209)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:08

Severity ?

7.0 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE

Processing maliciously crafted web content may lead to an unexpected process crash

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24209",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:15:08.714331Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:17:16.890Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:03.597Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:39.898Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24209",
    "datePublished": "2025-03-31T22:23:39.898Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-11-03T21:08:03.597Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-54502 (GCVE-0-2024-54502)

Vulnerability from cvelistv5

Published

2024-12-11 22:58

Modified

2025-11-03 22:31

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

Processing maliciously crafted web content may lead to an unexpected process crash

Summary

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

References

URL

Tags

	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54502",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-12T15:31:16.151169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-12T15:34:12.970Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:31:17.057Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00002.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/7"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T22:58:51.903Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54502",
    "datePublished": "2024-12-11T22:58:51.903Z",
    "dateReserved": "2024-12-03T22:50:35.499Z",
    "dateUpdated": "2025-11-03T22:31:17.057Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30430 (GCVE-0-2025-30430)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:14

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Password autofill may fill in passwords after failing authentication

Summary

This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30430",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:37:06.283551Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:39:13.322Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:14:12.136Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Password autofill may fill in passwords after failing authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:50.933Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30430",
    "datePublished": "2025-03-31T22:23:50.933Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:14:12.136Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30434 (GCVE-0-2025-30434)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:14

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

Processing a maliciously crafted file may lead to a cross site scripting attack

Summary

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack.

References

URL

Tags

https://support.apple.com/en-us/122371

Impacted products

	Vendor	Product	Version
	Apple	iOS and iPadOS	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30434",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:14:00.655778Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:15:23.497Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:14:30.322Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to a cross site scripting attack",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:06.874Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30434",
    "datePublished": "2025-03-31T22:23:06.874Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-11-03T21:14:30.322Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24208 (GCVE-0-2025-24208)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:07

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

Loading a malicious iframe may lead to a cross-site scripting attack

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

Safari

Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24208",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:39:59.127549Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:40:52.864Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:56.548Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Loading a malicious iframe may lead to a cross-site scripting attack",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:30.722Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24208",
    "datePublished": "2025-03-31T22:23:30.722Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-11-03T21:07:56.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24238 (GCVE-0-2025-24238)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:10

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

An app may be able to gain elevated privileges

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24238",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:21.679Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:10:09.119Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain elevated privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:09.471Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24238",
    "datePublished": "2025-03-31T22:24:09.471Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-11-03T21:10:09.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24244 (GCVE-0-2025-24244)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:10

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

Processing a maliciously crafted font may result in the disclosure of process memory

Summary

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted font may result in the disclosure of process memory.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:51:19.936327Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:35.922Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:10:41.110Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted font may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted font may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:49.162Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24244",
    "datePublished": "2025-03-31T22:23:49.162Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-11-03T21:10:41.110Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-48958 (GCVE-0-2024-48958)

Vulnerability from cvelistv5

Published

2024-10-10 00:00

Modified

2025-11-03 20:41

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Summary

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

References

URL

Tags

	https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5
	https://github.com/libarchive/libarchive/pull/2148
	https://github.com/terrynini/CVE-Reports/tree/main/CVE-2024-48958

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "libarchive",
            "vendor": "libarchive",
            "versions": [
              {
                "lessThan": "3.7.5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-48958",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T20:35:05.629427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T20:35:53.287Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:41:07.588Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-29T19:22:54.655Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5"
        },
        {
          "url": "https://github.com/libarchive/libarchive/pull/2148"
        },
        {
          "url": "https://github.com/terrynini/CVE-Reports/tree/main/CVE-2024-48958"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-48958",
    "datePublished": "2024-10-10T00:00:00.000Z",
    "dateReserved": "2024-10-10T00:00:00.000Z",
    "dateUpdated": "2025-11-03T20:41:07.588Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-54543 (GCVE-0-2024-54543)

Vulnerability from cvelistv5

Published

2025-01-27 21:46

Modified

2025-11-03 20:48

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing maliciously crafted web content may lead to memory corruption

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption.

References

URL

Tags

	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54543",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-05T15:24:18.396574Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-05T15:24:22.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:48:46.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:46:30.578Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54543",
    "datePublished": "2025-01-27T21:46:30.578Z",
    "dateReserved": "2024-12-03T22:50:35.512Z",
    "dateUpdated": "2025-11-03T20:48:46.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24214 (GCVE-0-2025-24214)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:08

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to access sensitive user data

Summary

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24214",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T16:07:48.610305Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:09:27.579Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:45.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:01.477Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24214",
    "datePublished": "2025-03-31T22:24:01.477Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-11-03T21:08:45.678Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30425 (GCVE-0-2025-30425)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:13

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE

A malicious website may be able to track users in Safari private browsing mode

Summary

This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30425",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:30:55.559638Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:32:24.826Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:13:39.552Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may be able to track users in Safari private browsing mode",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:50.104Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30425",
    "datePublished": "2025-03-31T22:22:50.104Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:13:39.552Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30429 (GCVE-0-2025-30429)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:14

Severity ?

6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

An app may be able to break out of its sandbox

Summary

A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30429",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:06:37.390836Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:07:41.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:14:07.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:41.739Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30429",
    "datePublished": "2025-03-31T22:22:41.739Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-11-03T21:14:07.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30463 (GCVE-0-2025-30463)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:16

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to access sensitive user data

Summary

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

macOS

Version: unspecified < 15.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30463",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:16:49.115468Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:17:50.780Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:00.779Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:05.846Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30463",
    "datePublished": "2025-03-31T22:23:05.846Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-11-03T21:16:00.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-31182 (GCVE-0-2025-31182)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:16

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

An app may be able to delete files for which it does not have permission

Summary

This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31182",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:29:59.647862Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:30:51.884Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:41.893Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to delete files for which it does not have permission",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:56.605Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31182",
    "datePublished": "2025-03-31T22:22:56.605Z",
    "dateReserved": "2025-03-27T16:13:58.310Z",
    "dateUpdated": "2025-11-03T21:16:41.893Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24182 (GCVE-0-2025-24182)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:06

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

Processing a maliciously crafted font may result in the disclosure of process memory

Summary

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24182",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:40:34.727397Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:41:30.848Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:06:48.641Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted font may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:50.082Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24182",
    "datePublished": "2025-03-31T22:23:50.082Z",
    "dateReserved": "2025-01-17T00:00:44.993Z",
    "dateUpdated": "2025-11-03T21:06:48.641Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24283 (GCVE-0-2025-24283)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:12

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

An app may be able to access sensitive user data

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:50.801857Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:19:35.557Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:12:39.156Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logging issue was addressed with improved data redaction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:45.502Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24283",
    "datePublished": "2025-03-31T22:22:45.502Z",
    "dateReserved": "2025-01-17T00:00:45.020Z",
    "dateUpdated": "2025-11-03T21:12:39.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-54508 (GCVE-0-2024-54508)

Vulnerability from cvelistv5

Published

2024-12-11 22:58

Modified

2025-11-03 22:31

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

Processing maliciously crafted web content may lead to an unexpected process crash

Summary

References

URL

Tags

	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54508",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-16T18:36:10.312854Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-16T18:37:55.936Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:31:36.249Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00002.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/7"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Dec/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T22:58:14.487Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54508",
    "datePublished": "2024-12-11T22:58:14.487Z",
    "dateReserved": "2024-12-03T22:50:35.502Z",
    "dateUpdated": "2025-11-03T22:31:36.249Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24213 (GCVE-0-2025-24213)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:08

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

A type confusion issue could lead to memory corruption

Summary

This issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.5, Safari 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, watchOS 11.5, visionOS 2.5. A type confusion issue could lead to memory corruption.

References

URL

Tags

	https://support.apple.com/en-us/122720
	https://support.apple.com/en-us/122404
	https://support.apple.com/en-us/122405
	https://support.apple.com/en-us/122716
	https://support.apple.com/en-us/122719
	https://support.apple.com/en-us/122722
	https://support.apple.com/en-us/122721

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.5

Apple	iOS and iPadOS	Version: unspecified < 18.5
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.5
Apple	Safari	Version: unspecified < 18.5
Apple	watchOS	Version: unspecified < 11.5
Apple	visionOS	Version: unspecified < 2.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24213",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:29.888734Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T17:46:55.488Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:40.157Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/7"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/6"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.5, Safari 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, watchOS 11.5, visionOS 2.5. A type confusion issue could lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A type confusion issue could lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-13T16:29:10.048Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122720"
        },
        {
          "url": "https://support.apple.com/en-us/122404"
        },
        {
          "url": "https://support.apple.com/en-us/122405"
        },
        {
          "url": "https://support.apple.com/en-us/122716"
        },
        {
          "url": "https://support.apple.com/en-us/122719"
        },
        {
          "url": "https://support.apple.com/en-us/122722"
        },
        {
          "url": "https://support.apple.com/en-us/122721"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24213",
    "datePublished": "2025-03-31T22:23:48.296Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-11-03T21:08:40.157Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24192 (GCVE-0-2025-24192)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:07

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

Visiting a website may leak sensitive data

Summary

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:03:00.646851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:08:12.601Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:05.375Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a website may leak sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:17.665Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24192",
    "datePublished": "2025-03-31T22:24:17.665Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-11-03T21:07:05.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24190 (GCVE-0-2025-24190)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:06

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory

Summary

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24190",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:46:00.795562Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:46:43.406Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:06:58.338Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:42.664Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24190",
    "datePublished": "2025-03-31T22:22:42.664Z",
    "dateReserved": "2025-01-17T00:00:44.996Z",
    "dateUpdated": "2025-11-03T21:06:58.338Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24163 (GCVE-0-2025-24163)

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-11-03 21:05

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

Parsing a file may lead to an unexpected app termination

Summary

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.

References

URL

Tags

	https://support.apple.com/en-us/122069
	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122072
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122067
	https://support.apple.com/en-us/122071
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

Apple

macOS

Version: unspecified < 14.7

Apple	visionOS	Version: unspecified < 2.3
Apple	tvOS	Version: unspecified < 18.3
Apple	macOS	Version: unspecified < 15.3
Apple	iPadOS	Version: unspecified < 17.7
Apple	watchOS	Version: unspecified < 11.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24163",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T15:27:50.828926Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T19:44:36.835Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:05:32.167Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/19"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/18"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/16"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/15"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jan/13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Parsing a file may lead to an unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:54.808Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122069"
        },
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122072"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122067"
        },
        {
          "url": "https://support.apple.com/en-us/122071"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24163",
    "datePublished": "2025-01-27T21:45:54.808Z",
    "dateReserved": "2025-01-17T00:00:44.988Z",
    "dateUpdated": "2025-11-03T21:05:32.167Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30454 (GCVE-0-2025-30454)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:15

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

A malicious app may be able to access private information

Summary

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30454",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:51:19.701739Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:52:22.662Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:15:34.029Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:18.889Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30454",
    "datePublished": "2025-03-31T22:23:18.889Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-11-03T21:15:34.029Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24221 (GCVE-0-2025-24221)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:09

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

Sensitive keychain data may be accessible from an iOS backup

Summary

This issue was addressed with improved data access restriction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Sensitive keychain data may be accessible from an iOS backup.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	iPadOS	Version: unspecified < 17.7
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24221",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:28:09.161349Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:30:07.844Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:09:09.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved data access restriction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Sensitive keychain data may be accessible from an iOS backup."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Sensitive keychain data may be accessible from an iOS backup",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:50.981Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24221",
    "datePublished": "2025-03-31T22:22:50.981Z",
    "dateReserved": "2025-01-17T00:00:45.004Z",
    "dateUpdated": "2025-11-03T21:09:09.392Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24237 (GCVE-0-2025-24237)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:10

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

An app may be able to cause unexpected system termination

Summary

A buffer overflow was addressed with improved bounds checking. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24237",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:36:30.367003Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:38:53.510Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:10:02.070Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:53.689Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24237",
    "datePublished": "2025-03-31T22:22:53.689Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-11-03T21:10:02.070Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-56171 (GCVE-0-2024-56171)

Vulnerability from cvelistv5

Published

2025-02-18 00:00

Modified

2025-11-03 20:49

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE

CWE-416 - Use After Free

Summary

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

References

URL

Tags

https://gitlab.gnome.org/GNOME/libxml2/-/issues/828

Impacted products

	Vendor	Product	Version
	xmlsoft	libxml2	Version: 0 ≤ Version: 2.13.0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-56171",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-19T16:26:31.484719Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-19T16:26:41.297Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:49:05.224Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250328-0010/"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "libxml2",
          "vendor": "xmlsoft",
          "versions": [
            {
              "lessThan": "2.12.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.6",
              "status": "affected",
              "version": "2.13.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.12.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.13.6",
                  "versionStartIncluding": "2.13.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T22:10:20.934Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/828"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-56171",
    "datePublished": "2025-02-18T00:00:00.000Z",
    "dateReserved": "2024-12-18T00:00:00.000Z",
    "dateUpdated": "2025-11-03T20:49:05.224Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30439 (GCVE-0-2025-30439)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:14

Severity ?

4.6 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

An attacker with physical access to a locked device may be able to view sensitive user information

Summary

The issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An attacker with physical access to a locked device may be able to view sensitive user information.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30439",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:53:15.437190Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:54:06.005Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:14:45.990Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An attacker with physical access to a locked device may be able to view sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with physical access to a locked device may be able to view sensitive user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:13.511Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30439",
    "datePublished": "2025-03-31T22:23:13.511Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-11-03T21:14:45.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24212 (GCVE-0-2025-24212)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:08

Severity ?

6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

An app may be able to break out of its sandbox

Summary

This issue was addressed with improved checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24212",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:09:43.563462Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:09:49.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:33.185Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:21.568Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24212",
    "datePublished": "2025-03-31T22:23:21.568Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-11-03T21:08:33.185Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24203 (GCVE-0-2025-24203)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-12 00:20

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

CWE

An app may be able to modify protected parts of the file system

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.

References

URL

Tags

	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122376

Impacted products

Vendor

Product

Version

Apple

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7
Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	tvOS	Version: unspecified < 18.4
Apple	visionOS	Version: unspecified < 2.4
Apple	watchOS	Version: unspecified < 11.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24203",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:01:39.243398Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:02:14.564Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:41.395Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-12T00:20:53.179Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122376"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24203",
    "datePublished": "2025-03-31T22:24:18.620Z",
    "dateReserved": "2025-01-17T00:00:45.000Z",
    "dateUpdated": "2025-11-12T00:20:53.179Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24173 (GCVE-0-2025-24173)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:06

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

An app may be able to break out of its sandbox

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24173",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:29.447421Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:24:25.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:06:13.894Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:49.244Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24173",
    "datePublished": "2025-03-31T22:22:49.244Z",
    "dateReserved": "2025-01-17T00:00:44.990Z",
    "dateUpdated": "2025-11-03T21:06:13.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24194 (GCVE-0-2025-24194)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:07

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

Processing maliciously crafted web content may result in the disclosure of process memory

Summary

A logic issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may result in the disclosure of process memory.

References

URL

Tags

	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24194",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:55:09.863833Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:21:36.439Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:12.294Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:46.552Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24194",
    "datePublished": "2025-03-31T22:23:46.552Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-11-03T21:07:12.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-30469 (GCVE-0-2025-30469)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:16

Severity ?

2.4 (Low) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

A person with physical access to an iOS device may be able to access photos from the lock screen

Summary

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen.

References

URL

Tags

https://support.apple.com/en-us/122371

Impacted products

	Vendor	Product	Version
	Apple	iOS and iPadOS	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 2.4,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:42:12.389266Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:44:00.307Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:16:16.314Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A person with physical access to an iOS device may be able to access photos from the lock screen",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:37.850Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30469",
    "datePublished": "2025-03-31T22:22:37.850Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-11-03T21:16:16.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24257 (GCVE-0-2025-24257)

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-11-03 21:11

Severity ?

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE

An app may be able to cause unexpected system termination or write kernel memory

Summary

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to cause unexpected system termination or write kernel memory.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24257",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T19:09:50.687666Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T13:17:38.266Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:11:21.699Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to cause unexpected system termination or write kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination or write kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:33.089Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24257",
    "datePublished": "2025-03-31T22:22:33.089Z",
    "dateReserved": "2025-01-17T00:00:45.014Z",
    "dateUpdated": "2025-11-03T21:11:21.699Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24215 (GCVE-0-2025-24215)

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-11-03 21:08

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

A malicious app may be able to access private information

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information.

References

URL

Tags

	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24215",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:59:03.877270Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:00:36.922Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:08:51.150Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:19.564Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24215",
    "datePublished": "2025-03-31T22:24:19.564Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-11-03T21:08:51.150Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24198 (GCVE-0-2025-24198)

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-11-03 21:07

Severity ?

6.6 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

An attacker with physical access may be able to use Siri to access sensitive user data

Summary

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access may be able to use Siri to access sensitive user data.

References

URL

Tags

	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24198",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:13:20.724903Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:13:50.003Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:07:26.122Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access may be able to use Siri to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with physical access may be able to use Siri to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:38.971Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24198",
    "datePublished": "2025-03-31T22:23:38.971Z",
    "dateReserved": "2025-01-17T00:00:44.998Z",
    "dateUpdated": "2025-11-03T21:07:26.122Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

ncsc-2025-0103

Vulnerability from csaf_ncscnl

CVE-2025-30447 (GCVE-0-2025-30447)

Vulnerability from cvelistv5

CVE-2025-30428 (GCVE-0-2025-30428)

Vulnerability from cvelistv5

CVE-2025-24095 (GCVE-0-2025-24095)

Vulnerability from cvelistv5

CVE-2025-30467 (GCVE-0-2025-30467)

Vulnerability from cvelistv5

CVE-2025-30456 (GCVE-0-2025-30456)

Vulnerability from cvelistv5

CVE-2025-31183 (GCVE-0-2025-31183)

Vulnerability from cvelistv5

CVE-2025-24210 (GCVE-0-2025-24210)

Vulnerability from cvelistv5

CVE-2024-54534 (GCVE-0-2024-54534)

Vulnerability from cvelistv5

CVE-2024-9681 (GCVE-0-2024-9681)

Vulnerability from cvelistv5

CVE-2025-24217 (GCVE-0-2025-24217)

Vulnerability from cvelistv5

CVE-2025-30471 (GCVE-0-2025-30471)

Vulnerability from cvelistv5

CVE-2025-30426 (GCVE-0-2025-30426)

Vulnerability from cvelistv5

CVE-2025-24264 (GCVE-0-2025-24264)

Vulnerability from cvelistv5

CVE-2025-30427 (GCVE-0-2025-30427)

Vulnerability from cvelistv5

CVE-2025-24097 (GCVE-0-2025-24097)

Vulnerability from cvelistv5

CVE-2025-27113 (GCVE-0-2025-27113)

Vulnerability from cvelistv5

CVE-2025-30433 (GCVE-0-2025-30433)

Vulnerability from cvelistv5

CVE-2025-24113 (GCVE-0-2025-24113)

Vulnerability from cvelistv5

CVE-2025-24211 (GCVE-0-2025-24211)

Vulnerability from cvelistv5

CVE-2025-31184 (GCVE-0-2025-31184)

Vulnerability from cvelistv5

CVE-2025-31191 (GCVE-0-2025-31191)

Vulnerability from cvelistv5

CVE-2025-24085 (GCVE-0-2025-24085)

Vulnerability from cvelistv5

CVE-2025-24200 (GCVE-0-2025-24200)

Vulnerability from cvelistv5

CVE-2025-24193 (GCVE-0-2025-24193)

Vulnerability from cvelistv5

CVE-2025-24243 (GCVE-0-2025-24243)

Vulnerability from cvelistv5

CVE-2025-24205 (GCVE-0-2025-24205)

Vulnerability from cvelistv5

CVE-2025-24201 (GCVE-0-2025-24201)

Vulnerability from cvelistv5

CVE-2025-30438 (GCVE-0-2025-30438)

Vulnerability from cvelistv5

CVE-2025-30470 (GCVE-0-2025-30470)

Vulnerability from cvelistv5

CVE-2025-24216 (GCVE-0-2025-24216)

Vulnerability from cvelistv5

CVE-2025-31192 (GCVE-0-2025-31192)

Vulnerability from cvelistv5

CVE-2025-24180 (GCVE-0-2025-24180)

Vulnerability from cvelistv5

CVE-2025-24167 (GCVE-0-2025-24167)

Vulnerability from cvelistv5

CVE-2025-24178 (GCVE-0-2025-24178)

Vulnerability from cvelistv5

CVE-2025-30432 (GCVE-0-2025-30432)

Vulnerability from cvelistv5

CVE-2025-30465 (GCVE-0-2025-30465)

Vulnerability from cvelistv5

CVE-2025-24230 (GCVE-0-2025-24230)

Vulnerability from cvelistv5

CVE-2025-24202 (GCVE-0-2025-24202)

Vulnerability from cvelistv5

CVE-2025-24209 (GCVE-0-2025-24209)