csaf_ncscnl - ncsc-2025-0103

Vulnerability from csaf_ncscnl

Published

2025-04-01 08:42

Modified

2025-04-01 08:42

Summary

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Apple heeft meerdere kwetsbaarheden verholpen in iOS en iPadOS.

Interpretaties

De kwetsbaarheden omvatten onder andere geheugenbeheerproblemen, ongeautoriseerde toegang tot gevoelige gebruikersdata, en de mogelijkheid voor applicaties om hun sandbox-omgevingen te ontsnappen. Deze kwetsbaarheden konden leiden tot ongeautoriseerde toegang, gegevenswijzigingen, of zelfs Denial-of-Service. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren of link te volgen.

Oplossingen

Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-1025

Comparison Using Wrong Factors

CWE-697

Incorrect Comparison

CWE-125

Out-of-bounds Read

CWE-284

Improper Access Control

CWE-416

Use After Free

CWE-476

NULL Pointer Dereference

CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE-400

Uncontrolled Resource Consumption

CWE-863

Incorrect Authorization

CWE-787

Out-of-bounds Write

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-20

Improper Input Validation

CWE-276

Incorrect Default Permissions

CWE-275

CWE-770

Allocation of Resources Without Limits or Throttling

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft meerdere kwetsbaarheden verholpen in iOS en iPadOS.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten onder andere geheugenbeheerproblemen, ongeautoriseerde toegang tot gevoelige gebruikersdata, en de mogelijkheid voor applicaties om hun sandbox-omgevingen te ontsnappen. Deze kwetsbaarheden konden leiden tot ongeautoriseerde toegang, gegevenswijzigingen, of zelfs Denial-of-Service. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren of link te volgen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Comparison Using Wrong Factors",
        "title": "CWE-1025"
      },
      {
        "category": "general",
        "text": "Incorrect Comparison",
        "title": "CWE-697"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
        "title": "CWE-94"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Incorrect Authorization",
        "title": "CWE-863"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Incorrect Default Permissions",
        "title": "CWE-276"
      },
      {
        "category": "general",
        "text": "CWE-275",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://support.apple.com/en-us/122345"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://support.apple.com/en-us/122346"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://support.apple.com/en-us/122372"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://support.apple.com/en-us/122371"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
    "tracking": {
      "current_release_date": "2025-04-01T08:42:27.059536Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0103",
      "initial_release_date": "2025-04-01T08:42:27.059536Z",
      "revision_history": [
        {
          "date": "2025-04-01T08:42:27.059536Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:apple/16.7.11",
                "product": {
                  "name": "vers:apple/16.7.11",
                  "product_id": "CSAFPID-2588450"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.2",
                "product": {
                  "name": "vers:apple/18.2",
                  "product_id": "CSAFPID-1432307"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.3",
                "product": {
                  "name": "vers:apple/18.3",
                  "product_id": "CSAFPID-1902947"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.3.2",
                "product": {
                  "name": "vers:apple/18.3.2",
                  "product_id": "CSAFPID-2462478"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/18.4",
                "product": {
                  "name": "vers:apple/18.4",
                  "product_id": "CSAFPID-2588454"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.2",
                "product": {
                  "name": "vers:unknown/\u003c18.2",
                  "product_id": "CSAFPID-1436912"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.3",
                "product": {
                  "name": "vers:unknown/\u003c18.3",
                  "product_id": "CSAFPID-1904380"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.3.1",
                "product": {
                  "name": "vers:unknown/\u003c18.3.1",
                  "product_id": "CSAFPID-2177846"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/\u003c18.3.2",
                "product": {
                  "name": "vers:unknown/\u003c18.3.2",
                  "product_id": "CSAFPID-2469033"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:apple/15.8.4",
                "product": {
                  "name": "vers:apple/15.8.4",
                  "product_id": "CSAFPID-2588452"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/unknown",
                "product": {
                  "name": "vers:unknown/unknown",
                  "product_id": "CSAFPID-1332226"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c18.2",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c18.2",
                  "product_id": "CSAFPID-1432291"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c18.3",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c18.3",
                  "product_id": "CSAFPID-1901367"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/unspecified|\u003c18.4",
                "product": {
                  "name": "vers:unknown/unspecified|\u003c18.4",
                  "product_id": "CSAFPID-2590080"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS and iPadOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.0",
                "product": {
                  "name": "vers:unknown/15.0",
                  "product_id": "CSAFPID-90190",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.1",
                "product": {
                  "name": "vers:unknown/15.1",
                  "product_id": "CSAFPID-90119"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.2",
                "product": {
                  "name": "vers:unknown/15.2",
                  "product_id": "CSAFPID-90182"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.3",
                "product": {
                  "name": "vers:unknown/15.3",
                  "product_id": "CSAFPID-773820"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.4",
                "product": {
                  "name": "vers:unknown/15.4",
                  "product_id": "CSAFPID-90174"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.5",
                "product": {
                  "name": "vers:unknown/15.5",
                  "product_id": "CSAFPID-90216"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.6",
                "product": {
                  "name": "vers:unknown/15.6",
                  "product_id": "CSAFPID-90200"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.7",
                "product": {
                  "name": "vers:unknown/15.7",
                  "product_id": "CSAFPID-90232"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.8",
                "product": {
                  "name": "vers:unknown/15.8",
                  "product_id": "CSAFPID-90303"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/15.8.1",
                "product": {
                  "name": "vers:unknown/15.8.1",
                  "product_id": "CSAFPID-821264"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0",
                "product": {
                  "name": "vers:unknown/16.0",
                  "product_id": "CSAFPID-90255"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.1",
                "product": {
                  "name": "vers:unknown/16.1",
                  "product_id": "CSAFPID-90236"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.2",
                "product": {
                  "name": "vers:unknown/16.2",
                  "product_id": "CSAFPID-90241"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.3",
                "product": {
                  "name": "vers:unknown/16.3",
                  "product_id": "CSAFPID-90305"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.4",
                "product": {
                  "name": "vers:unknown/16.4",
                  "product_id": "CSAFPID-90301"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.5",
                "product": {
                  "name": "vers:unknown/16.5",
                  "product_id": "CSAFPID-90297"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.6",
                "product": {
                  "name": "vers:unknown/16.6",
                  "product_id": "CSAFPID-90295"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.7",
                "product": {
                  "name": "vers:unknown/16.7",
                  "product_id": "CSAFPID-90291"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.0",
                "product": {
                  "name": "vers:unknown/17.0",
                  "product_id": "CSAFPID-90302",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.1",
                "product": {
                  "name": "vers:unknown/17.1",
                  "product_id": "CSAFPID-90306"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.2",
                "product": {
                  "name": "vers:unknown/17.2",
                  "product_id": "CSAFPID-90307"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.3",
                "product": {
                  "name": "vers:unknown/17.3",
                  "product_id": "CSAFPID-90308"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.4",
                "product": {
                  "name": "vers:unknown/17.4",
                  "product_id": "CSAFPID-1077909"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.5",
                "product": {
                  "name": "vers:unknown/17.5",
                  "product_id": "CSAFPID-1136180"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.6",
                "product": {
                  "name": "vers:unknown/17.6",
                  "product_id": "CSAFPID-1136554"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.7",
                "product": {
                  "name": "vers:unknown/17.7",
                  "product_id": "CSAFPID-1136185"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.0",
                "product": {
                  "name": "vers:unknown/18.0",
                  "product_id": "CSAFPID-1161343",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.1",
                "product": {
                  "name": "vers:unknown/18.1",
                  "product_id": "CSAFPID-1443657"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.2",
                "product": {
                  "name": "vers:unknown/18.2",
                  "product_id": "CSAFPID-1906294"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/18.3",
                "product": {
                  "name": "vers:unknown/18.3",
                  "product_id": "CSAFPID-1987760"
                }
              }
            ],
            "category": "product_name",
            "name": "iPhone OS"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:apple/18.2",
                    "product": {
                      "name": "vers:apple/18.2",
                      "product_id": "CSAFPID-1618595"
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:apple/18.3",
                    "product": {
                      "name": "vers:apple/18.3",
                      "product_id": "CSAFPID-1915327"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Iphone Os"
              }
            ],
            "category": "product_family",
            "name": "Apple"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-24217",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24217",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24217.json"
        }
      ],
      "title": "CVE-2025-24217"
    },
    {
      "cve": "CVE-2025-24221",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24221",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24221.json"
        }
      ],
      "title": "CVE-2025-24221"
    },
    {
      "cve": "CVE-2025-24230",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24230",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24230.json"
        }
      ],
      "title": "CVE-2025-24230"
    },
    {
      "cve": "CVE-2025-24237",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24237",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24237.json"
        }
      ],
      "title": "CVE-2025-24237"
    },
    {
      "cve": "CVE-2025-24238",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24238",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24238.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24238"
    },
    {
      "cve": "CVE-2025-24243",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
          "title": "CWE-94"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24243",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24243.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24243"
    },
    {
      "cve": "CVE-2025-24244",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24244",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24244.json"
        }
      ],
      "title": "CVE-2025-24244"
    },
    {
      "cve": "CVE-2025-24257",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24257",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24257.json"
        }
      ],
      "title": "CVE-2025-24257"
    },
    {
      "cve": "CVE-2025-24264",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24264",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24264.json"
        }
      ],
      "title": "CVE-2025-24264"
    },
    {
      "cve": "CVE-2025-24283",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24283",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24283.json"
        }
      ],
      "title": "CVE-2025-24283"
    },
    {
      "cve": "CVE-2025-27113",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27113",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27113.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-27113"
    },
    {
      "cve": "CVE-2025-30425",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30425",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30425.json"
        }
      ],
      "title": "CVE-2025-30425"
    },
    {
      "cve": "CVE-2025-30426",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30426",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30426.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30426"
    },
    {
      "cve": "CVE-2025-30427",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30427",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30427.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30427"
    },
    {
      "cve": "CVE-2025-30428",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30428",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30428.json"
        }
      ],
      "title": "CVE-2025-30428"
    },
    {
      "cve": "CVE-2025-30429",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30429",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30429.json"
        }
      ],
      "title": "CVE-2025-30429"
    },
    {
      "cve": "CVE-2025-30430",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30430",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30430.json"
        }
      ],
      "title": "CVE-2025-30430"
    },
    {
      "cve": "CVE-2025-30432",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30432",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30432.json"
        }
      ],
      "title": "CVE-2025-30432"
    },
    {
      "cve": "CVE-2025-30433",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30433",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30433.json"
        }
      ],
      "title": "CVE-2025-30433"
    },
    {
      "cve": "CVE-2025-30434",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30434",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30434.json"
        }
      ],
      "title": "CVE-2025-30434"
    },
    {
      "cve": "CVE-2025-30438",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30438",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30438.json"
        }
      ],
      "title": "CVE-2025-30438"
    },
    {
      "cve": "CVE-2025-30439",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30439",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30439.json"
        }
      ],
      "title": "CVE-2025-30439"
    },
    {
      "cve": "CVE-2025-30447",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30447",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30447.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30447"
    },
    {
      "cve": "CVE-2025-30454",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30454",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30454.json"
        }
      ],
      "title": "CVE-2025-30454"
    },
    {
      "cve": "CVE-2025-30456",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30456",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30456.json"
        }
      ],
      "title": "CVE-2025-30456"
    },
    {
      "cve": "CVE-2025-30463",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30463",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30463.json"
        }
      ],
      "title": "CVE-2025-30463"
    },
    {
      "cve": "CVE-2025-30465",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30465",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30465.json"
        }
      ],
      "title": "CVE-2025-30465"
    },
    {
      "cve": "CVE-2025-30467",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30467",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30467.json"
        }
      ],
      "title": "CVE-2025-30467"
    },
    {
      "cve": "CVE-2025-30469",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30469",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30469.json"
        }
      ],
      "title": "CVE-2025-30469"
    },
    {
      "cve": "CVE-2025-30470",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30470",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30470.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-30470"
    },
    {
      "cve": "CVE-2025-30471",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30471",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30471.json"
        }
      ],
      "title": "CVE-2025-30471"
    },
    {
      "cve": "CVE-2025-31182",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31182.json"
        }
      ],
      "title": "CVE-2025-31182"
    },
    {
      "cve": "CVE-2025-31183",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31183",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31183.json"
        }
      ],
      "title": "CVE-2025-31183"
    },
    {
      "cve": "CVE-2025-31184",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31184",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31184.json"
        }
      ],
      "title": "CVE-2025-31184"
    },
    {
      "cve": "CVE-2025-31191",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31191",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31191.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-31191"
    },
    {
      "cve": "CVE-2025-31192",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31192.json"
        }
      ],
      "title": "CVE-2025-31192"
    },
    {
      "cve": "CVE-2024-9681",
      "cwe": {
        "id": "CWE-1025",
        "name": "Comparison Using Wrong Factors"
      },
      "notes": [
        {
          "category": "other",
          "text": "Comparison Using Wrong Factors",
          "title": "CWE-1025"
        },
        {
          "category": "other",
          "text": "Incorrect Comparison",
          "title": "CWE-697"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-9681",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-9681.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-9681"
    },
    {
      "cve": "CVE-2024-48958",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-48958",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-48958.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-48958"
    },
    {
      "cve": "CVE-2024-54502",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54502",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54502.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-54502"
    },
    {
      "cve": "CVE-2024-54508",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54508",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54508.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-54508"
    },
    {
      "cve": "CVE-2024-54534",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54534",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
        }
      ],
      "title": "CVE-2024-54534"
    },
    {
      "cve": "CVE-2024-54543",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54543",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54543.json"
        }
      ],
      "title": "CVE-2024-54543"
    },
    {
      "cve": "CVE-2024-56171",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-56171",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-56171.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2024-56171"
    },
    {
      "cve": "CVE-2025-24085",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24085",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24085.json"
        }
      ],
      "title": "CVE-2025-24085"
    },
    {
      "cve": "CVE-2025-24095",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24095",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24095.json"
        }
      ],
      "title": "CVE-2025-24095"
    },
    {
      "cve": "CVE-2025-24097",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24097",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24097.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24097"
    },
    {
      "cve": "CVE-2025-24113",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24113",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24113.json"
        }
      ],
      "title": "CVE-2025-24113"
    },
    {
      "cve": "CVE-2025-24163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24163",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24163.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24163"
    },
    {
      "cve": "CVE-2025-24167",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24167",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24167.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24167"
    },
    {
      "cve": "CVE-2025-24173",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24173",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24173.json"
        }
      ],
      "title": "CVE-2025-24173"
    },
    {
      "cve": "CVE-2025-24178",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24178",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24178.json"
        }
      ],
      "title": "CVE-2025-24178"
    },
    {
      "cve": "CVE-2025-24180",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24180",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24180.json"
        }
      ],
      "title": "CVE-2025-24180"
    },
    {
      "cve": "CVE-2025-24182",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24182.json"
        }
      ],
      "title": "CVE-2025-24182"
    },
    {
      "cve": "CVE-2025-24190",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24190",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24190.json"
        }
      ],
      "title": "CVE-2025-24190"
    },
    {
      "cve": "CVE-2025-24192",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24192.json"
        }
      ],
      "title": "CVE-2025-24192"
    },
    {
      "cve": "CVE-2025-24193",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24193",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24193.json"
        }
      ],
      "title": "CVE-2025-24193"
    },
    {
      "cve": "CVE-2025-24194",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24194",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24194.json"
        }
      ],
      "title": "CVE-2025-24194"
    },
    {
      "cve": "CVE-2025-24198",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24198",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24198.json"
        }
      ],
      "title": "CVE-2025-24198"
    },
    {
      "cve": "CVE-2025-24200",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24200",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24200.json"
        }
      ],
      "title": "CVE-2025-24200"
    },
    {
      "cve": "CVE-2025-24201",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24201",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24201.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2588450",
            "CSAFPID-1432307",
            "CSAFPID-1902947",
            "CSAFPID-2462478",
            "CSAFPID-2588454",
            "CSAFPID-1436912",
            "CSAFPID-1904380",
            "CSAFPID-2177846",
            "CSAFPID-2469033",
            "CSAFPID-1332226",
            "CSAFPID-1432291",
            "CSAFPID-1901367",
            "CSAFPID-2590080",
            "CSAFPID-2588452",
            "CSAFPID-90190",
            "CSAFPID-90119",
            "CSAFPID-90182",
            "CSAFPID-773820",
            "CSAFPID-90174",
            "CSAFPID-90216",
            "CSAFPID-90200",
            "CSAFPID-90232",
            "CSAFPID-90303",
            "CSAFPID-821264",
            "CSAFPID-90255",
            "CSAFPID-90236",
            "CSAFPID-90241",
            "CSAFPID-90305",
            "CSAFPID-90301",
            "CSAFPID-90297",
            "CSAFPID-90295",
            "CSAFPID-90291",
            "CSAFPID-90302",
            "CSAFPID-90306",
            "CSAFPID-90307",
            "CSAFPID-90308",
            "CSAFPID-1077909",
            "CSAFPID-1136180",
            "CSAFPID-1136554",
            "CSAFPID-1136185",
            "CSAFPID-1618595",
            "CSAFPID-1915327",
            "CSAFPID-1161343",
            "CSAFPID-1443657",
            "CSAFPID-1906294",
            "CSAFPID-1987760"
          ]
        }
      ],
      "title": "CVE-2025-24201"
    },
    {
      "cve": "CVE-2025-24202",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24202",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24202.json"
        }
      ],
      "title": "CVE-2025-24202"
    },
    {
      "cve": "CVE-2025-24203",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24203",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24203.json"
        }
      ],
      "title": "CVE-2025-24203"
    },
    {
      "cve": "CVE-2025-24205",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24205",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24205.json"
        }
      ],
      "title": "CVE-2025-24205"
    },
    {
      "cve": "CVE-2025-24208",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24208",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24208.json"
        }
      ],
      "title": "CVE-2025-24208"
    },
    {
      "cve": "CVE-2025-24209",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24209",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24209.json"
        }
      ],
      "title": "CVE-2025-24209"
    },
    {
      "cve": "CVE-2025-24210",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24210",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24210.json"
        }
      ],
      "title": "CVE-2025-24210"
    },
    {
      "cve": "CVE-2025-24211",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24211",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24211.json"
        }
      ],
      "title": "CVE-2025-24211"
    },
    {
      "cve": "CVE-2025-24212",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24212",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24212.json"
        }
      ],
      "title": "CVE-2025-24212"
    },
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24213",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24213.json"
        }
      ],
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24214",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24214",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24214.json"
        }
      ],
      "title": "CVE-2025-24214"
    },
    {
      "cve": "CVE-2025-24215",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24215",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24215.json"
        }
      ],
      "title": "CVE-2025-24215"
    },
    {
      "cve": "CVE-2025-24216",
      "product_status": {
        "known_affected": [
          "CSAFPID-2588450",
          "CSAFPID-1432307",
          "CSAFPID-1902947",
          "CSAFPID-2462478",
          "CSAFPID-2588454",
          "CSAFPID-1436912",
          "CSAFPID-1904380",
          "CSAFPID-2177846",
          "CSAFPID-2469033",
          "CSAFPID-1332226",
          "CSAFPID-1432291",
          "CSAFPID-1901367",
          "CSAFPID-2590080",
          "CSAFPID-2588452",
          "CSAFPID-90190",
          "CSAFPID-90119",
          "CSAFPID-90182",
          "CSAFPID-773820",
          "CSAFPID-90174",
          "CSAFPID-90216",
          "CSAFPID-90200",
          "CSAFPID-90232",
          "CSAFPID-90303",
          "CSAFPID-821264",
          "CSAFPID-90255",
          "CSAFPID-90236",
          "CSAFPID-90241",
          "CSAFPID-90305",
          "CSAFPID-90301",
          "CSAFPID-90297",
          "CSAFPID-90295",
          "CSAFPID-90291",
          "CSAFPID-90302",
          "CSAFPID-90306",
          "CSAFPID-90307",
          "CSAFPID-90308",
          "CSAFPID-1077909",
          "CSAFPID-1136180",
          "CSAFPID-1136554",
          "CSAFPID-1136185",
          "CSAFPID-1618595",
          "CSAFPID-1915327",
          "CSAFPID-1161343",
          "CSAFPID-1443657",
          "CSAFPID-1906294",
          "CSAFPID-1987760"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24216",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24216.json"
        }
      ],
      "title": "CVE-2025-24216"
    }
  ]
}

cve-2025-24230

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 13:21

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Playing a malicious audio file may lead to an unexpected app termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24230",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:21:06.127067Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:21:39.430Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Playing a malicious audio file may lead to an unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Playing a malicious audio file may lead to an unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:03.205Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24230",
    "datePublished": "2025-03-31T22:23:03.205Z",
    "dateReserved": "2025-01-17T00:00:45.005Z",
    "dateUpdated": "2025-04-02T13:21:39.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30438

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:23

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30438",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:13.391417Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:23:06.883Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:02.346Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30438",
    "datePublished": "2025-03-31T22:23:02.346Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-04-02T15:23:06.883Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24215

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:00

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24215",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:59:03.877270Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:00:36.922Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:19.564Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24215",
    "datePublished": "2025-03-31T22:24:19.564Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-01T15:00:36.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31191

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-05-10 17:04

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31191",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:16:29.373173Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:17:04.790Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-05-10T17:04:46.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:10.313Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31191",
    "datePublished": "2025-03-31T22:24:10.313Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-05-10T17:04:46.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30469

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:44

Severity ?

2.4 (Low) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371

Impacted products

	Vendor	Product	Version
	Apple	iOS and iPadOS	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 2.4,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:42:12.389266Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:44:00.307Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A person with physical access to an iOS device may be able to access photos from the lock screen",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:37.850Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30469",
    "datePublished": "2025-03-31T22:22:37.850Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-04-02T13:44:00.307Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30447

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:18

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30447",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:18:28.221128Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:18:57.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:08.637Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30447",
    "datePublished": "2025-03-31T22:24:08.637Z",
    "dateReserved": "2025-03-22T00:04:43.719Z",
    "dateUpdated": "2025-04-01T04:18:57.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24085

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-03-13 15:48

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

References

▼	URL	Tags
	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122072
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122071
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

▼

Apple

visionOS

Version: unspecified < 2.3

Apple	tvOS	Version: unspecified < 18.3
Apple	macOS	Version: unspecified < 15.3
Apple	watchOS	Version: unspecified < 11.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24085",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T04:55:32.452789Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-01-29",
                "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T15:48:30.524Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:46.555Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122072"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122071"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24085",
    "datePublished": "2025-01-27T21:45:46.555Z",
    "dateReserved": "2025-01-17T00:00:44.965Z",
    "dateUpdated": "2025-03-13T15:48:30.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30433

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:33

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30433",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:33:03.281567Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:33:37.358Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:47.415Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30433",
    "datePublished": "2025-03-31T22:22:47.415Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-02T13:33:37.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24173

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:24

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24173",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:29.447421Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:24:25.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:49.244Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24173",
    "datePublished": "2025-03-31T22:22:49.244Z",
    "dateReserved": "2025-01-17T00:00:44.990Z",
    "dateUpdated": "2025-04-02T15:24:25.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24178

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:27

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24178",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:25:56.064045Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:27:03.555Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:58.527Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24178",
    "datePublished": "2025-03-31T22:22:58.527Z",
    "dateReserved": "2025-01-17T00:00:44.992Z",
    "dateUpdated": "2025-04-01T14:27:03.555Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24194

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:21

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A logic issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may result in the disclosure of process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24194",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:55:09.863833Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:21:36.439Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:46.552Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24194",
    "datePublished": "2025-03-31T22:23:46.552Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-04-02T15:21:36.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30426

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 04:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user's installed apps.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30426",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:29:36.628442Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:30:14.110Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user\u0027s installed apps."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to enumerate a user\u0027s installed apps",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:55.589Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30426",
    "datePublished": "2025-03-31T22:23:55.589Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-01T04:30:14.110Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30467

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 19:26

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30467",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:24:28.140256Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-451",
                "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:26:37.878Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to address bar spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:52.835Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30467",
    "datePublished": "2025-03-31T22:23:52.835Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-04-01T19:26:37.878Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24209

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:17

Severity ?

7.0 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24209",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:15:08.714331Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:17:16.890Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:39.898Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24209",
    "datePublished": "2025-03-31T22:23:39.898Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-04-01T18:17:16.890Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24244

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:20

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted font may result in the disclosure of process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24244",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:51:19.936327Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:35.922Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted font may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted font may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:49.162Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24244",
    "datePublished": "2025-03-31T22:23:49.162Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-04-02T15:20:35.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30465

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 14:31

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

References

▼	URL	Tags
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30465",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:28:51.335100Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T14:31:06.035Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:27.093Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30465",
    "datePublished": "2025-03-31T22:22:27.093Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-04-02T14:31:06.035Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24192

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:08

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:03:00.646851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:08:12.601Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a website may leak sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:17.665Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24192",
    "datePublished": "2025-03-31T22:24:17.665Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-04-01T15:08:12.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30427

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:18

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30427",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:18:38.091976Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:18:41.175Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:24.350Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30427",
    "datePublished": "2025-03-31T22:24:24.350Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-01T13:18:41.175Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24200

Vulnerability from cvelistv5

Published

2025-02-10 19:04

Modified

2025-03-20 14:31

Severity ?

6.1 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

References

▼	URL	Tags
	https://support.apple.com/en-us/122173
	https://support.apple.com/en-us/122174

Impacted products

Vendor

Product

Version

▼

Apple

iPadOS

Version: unspecified < 17.7

Apple

iOS and iPadOS

Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-02-11T06:03:30.230Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Feb/7"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Feb/8"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24200",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-13T04:55:19.603091Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-02-12",
                "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-20T14:31:13.832Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-10T19:04:45.242Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122173"
        },
        {
          "url": "https://support.apple.com/en-us/122174"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24200",
    "datePublished": "2025-02-10T19:04:45.242Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-03-20T14:31:13.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24221

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:30

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved data access restriction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Sensitive keychain data may be accessible from an iOS backup.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	iPadOS	Version: unspecified < 17.7
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24221",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:28:09.161349Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:30:07.844Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved data access restriction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Sensitive keychain data may be accessible from an iOS backup."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Sensitive keychain data may be accessible from an iOS backup",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:50.981Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24221",
    "datePublished": "2025-03-31T22:22:50.981Z",
    "dateReserved": "2025-01-17T00:00:45.004Z",
    "dateUpdated": "2025-04-02T13:30:07.844Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30456

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-03 17:45

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30456",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:32.610940Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "CWE-281 Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T17:45:45.180Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain root privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:45.632Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30456",
    "datePublished": "2025-03-31T22:23:45.632Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-03T17:45:45.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30470

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 13:02

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to read sensitive location information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30470",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:01:05.904338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:02:51.380Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to read sensitive location information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read sensitive location information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:25.184Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30470",
    "datePublished": "2025-03-31T22:24:25.184Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-04-01T13:02:51.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-54502

Vulnerability from cvelistv5

Published

2024-12-11 22:58

Modified

2024-12-12 15:34

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

References

▼	URL	Tags
	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54502",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-12T15:31:16.151169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-12T15:34:12.970Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T22:58:51.903Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54502",
    "datePublished": "2024-12-11T22:58:51.903Z",
    "dateReserved": "2024-12-03T22:50:35.499Z",
    "dateUpdated": "2024-12-12T15:34:12.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24237

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:38

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A buffer overflow was addressed with improved bounds checking. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24237",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:36:30.367003Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:38:53.510Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:53.689Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24237",
    "datePublished": "2025-03-31T22:22:53.689Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-04-01T14:38:53.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-54534

Vulnerability from cvelistv5

Published

2024-12-11 22:58

Modified

2025-04-19 00:11

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.

References

▼	URL	Tags
	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54534",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-20T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-21T04:56:02.918Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-19T00:11:06.867Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250418-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T22:58:39.974Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54534",
    "datePublished": "2024-12-11T22:58:39.974Z",
    "dateReserved": "2024-12-03T22:50:35.511Z",
    "dateUpdated": "2025-04-19T00:11:06.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24212

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 13:09

Severity ?

6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Summary

This issue was addressed with improved checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24212",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:09:43.563462Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:09:49.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved checks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:21.568Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24212",
    "datePublished": "2025-03-31T22:23:21.568Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-02T13:09:49.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-27113

Vulnerability from cvelistv5

Published

2025-02-18 00:00

Modified

2025-03-07 00:10

Severity ?

2.9 (Low) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Summary

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

References

▼	URL	Tags
	https://gitlab.gnome.org/GNOME/libxml2/-/issues/861

Impacted products

	Vendor	Product	Version
	xmlsoft	libxml2	Version: 0 ≤ Version: 2.13.0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27113",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-19T15:33:43.940899Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-19T15:34:14.618Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-03-07T00:10:52.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250306-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "libxml2",
          "vendor": "xmlsoft",
          "versions": [
            {
              "lessThan": "2.12.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.6",
              "status": "affected",
              "version": "2.13.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.12.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.13.6",
                  "versionStartIncluding": "2.13.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T22:29:44.033Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/861"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2025-27113",
    "datePublished": "2025-02-18T00:00:00.000Z",
    "dateReserved": "2025-02-18T00:00:00.000Z",
    "dateUpdated": "2025-03-07T00:10:52.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30428

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:14

Severity ?

5.4 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Summary

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

iPadOS

Version: unspecified < 17.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "LOW",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30428",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:16:04.786580Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-305",
                "description": "CWE-305 Authentication Bypass by Primary Weakness",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:14:48.945Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Photos in the Hidden Photos Album may be viewed without authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:34.013Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30428",
    "datePublished": "2025-03-31T22:22:34.013Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-03T20:14:48.945Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24097

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 04:23

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to read arbitrary file metadata.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24097",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T04:22:50.277186Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T04:23:27.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to read arbitrary file metadata."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read arbitrary file metadata",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:00.602Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24097",
    "datePublished": "2025-03-31T22:24:00.602Z",
    "dateReserved": "2025-01-17T00:00:44.967Z",
    "dateUpdated": "2025-04-01T04:23:27.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24283

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 15:19

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:57:50.801857Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:19:35.557Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logging issue was addressed with improved data redaction. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:45.502Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24283",
    "datePublished": "2025-03-31T22:22:45.502Z",
    "dateReserved": "2025-01-17T00:00:45.020Z",
    "dateUpdated": "2025-04-02T15:19:35.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24208

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:40

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

Safari

Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24208",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:39:59.127549Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:40:52.864Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Loading a malicious iframe may lead to a cross-site scripting attack",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:30.722Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24208",
    "datePublished": "2025-03-31T22:23:30.722Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-04-01T20:40:52.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30434

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:15

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371

Impacted products

	Vendor	Product	Version
	Apple	iOS and iPadOS	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30434",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:14:00.655778Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:15:23.497Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to a cross site scripting attack",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:06.874Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30434",
    "datePublished": "2025-03-31T22:23:06.874Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-04-01T14:15:23.497Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24167

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 03:59

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A download's origin may be incorrectly associated.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24167",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T03:58:17.736372Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T03:59:52.460Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A download\u0027s origin may be incorrectly associated."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A download\u0027s origin may be incorrectly associated",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:26.043Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24167",
    "datePublished": "2025-03-31T22:24:26.043Z",
    "dateReserved": "2025-01-17T00:00:44.989Z",
    "dateUpdated": "2025-04-01T03:59:52.460Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30439

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:54

Severity ?

4.6 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An attacker with physical access to a locked device may be able to view sensitive user information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30439",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:53:15.437190Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:54:06.005Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An attacker with physical access to a locked device may be able to view sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with physical access to a locked device may be able to view sensitive user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:13.511Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30439",
    "datePublished": "2025-03-31T22:23:13.511Z",
    "dateReserved": "2025-03-22T00:04:43.717Z",
    "dateUpdated": "2025-04-01T13:54:06.005Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31184

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-07 18:29

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31184",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T18:29:16.861062Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "CWE-281 Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T18:29:55.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may gain unauthorized access to Local Network",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:32.148Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31184",
    "datePublished": "2025-03-31T22:22:32.148Z",
    "dateReserved": "2025-03-27T16:13:58.311Z",
    "dateUpdated": "2025-04-07T18:29:55.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30471

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:52

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A validation issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote user may be able to cause a denial-of-service.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30471",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:48:41.140539Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:52:14.967Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A validation issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote user may be able to cause a denial-of-service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote user may be able to cause a denial-of-service",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:53.668Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30471",
    "datePublished": "2025-03-31T22:23:53.668Z",
    "dateReserved": "2025-03-22T00:04:43.723Z",
    "dateUpdated": "2025-04-02T15:52:14.967Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24201

Vulnerability from cvelistv5

Published

2025-03-11 18:07

Modified

2025-04-13 20:03

Severity ?

7.1 (High) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Summary

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

References

▼	URL	Tags
	https://support.apple.com/en-us/122281
	https://support.apple.com/en-us/122283
	https://support.apple.com/en-us/122284
	https://support.apple.com/en-us/122285
	https://support.apple.com/en-us/122376
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122346
	https://support.apple.com/en-us/122345

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.3

Apple	macOS	Version: unspecified < 15.3
Apple	visionOS	Version: unspecified < 2.3
Apple	Safari	Version: unspecified < 18.3
Apple	watchOS	Version: unspecified < 11.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	iOS and iPadOS	Version: unspecified < 16.7
Apple	iOS and iPadOS	Version: unspecified < 15.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24201",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-11T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-03-13",
                "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-14T03:55:19.299Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2025-03-13T00:00:00+00:00",
            "value": "CVE-2025-24201 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-13T20:03:04.398Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/2"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/3"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Mar/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/16"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-11T13:12:38.809Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122281"
        },
        {
          "url": "https://support.apple.com/en-us/122283"
        },
        {
          "url": "https://support.apple.com/en-us/122284"
        },
        {
          "url": "https://support.apple.com/en-us/122285"
        },
        {
          "url": "https://support.apple.com/en-us/122376"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122346"
        },
        {
          "url": "https://support.apple.com/en-us/122345"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24201",
    "datePublished": "2025-03-11T18:07:21.848Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-04-13T20:03:04.398Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24243

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 03:55

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted file may lead to arbitrary code execution.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24243",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:30.227Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted file may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:59.664Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24243",
    "datePublished": "2025-03-31T22:23:59.664Z",
    "dateReserved": "2025-01-17T00:00:45.008Z",
    "dateUpdated": "2025-04-02T03:55:30.227Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24095

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:16

Severity ?

7.6 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

visionOS

Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.6,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24095",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:11:43.517993Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-288",
                "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:16:56.303Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to bypass Privacy preferences",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:36.818Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24095",
    "datePublished": "2025-03-31T22:22:36.818Z",
    "dateReserved": "2025-01-17T00:00:44.967Z",
    "dateUpdated": "2025-04-03T20:16:56.303Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24210

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:25

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

A logic error was addressed with improved error handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Parsing an image may lead to disclosure of user information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24210",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:23:05.463704Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-783",
                "description": "CWE-783 Operator Precedence Logic Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:25:02.925Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic error was addressed with improved error handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Parsing an image may lead to disclosure of user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Parsing an image may lead to disclosure of user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:59.513Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24210",
    "datePublished": "2025-03-31T22:22:59.513Z",
    "dateReserved": "2025-01-17T00:00:45.001Z",
    "dateUpdated": "2025-04-01T14:25:02.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30454

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:52

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30454",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:51:19.701739Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:52:22.662Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access private information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:18.889Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30454",
    "datePublished": "2025-03-31T22:23:18.889Z",
    "dateReserved": "2025-03-22T00:04:43.720Z",
    "dateUpdated": "2025-04-01T13:52:22.662Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24163

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-03-18 19:44

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Summary

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.

References

▼	URL	Tags
	https://support.apple.com/en-us/122069
	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122072
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122067
	https://support.apple.com/en-us/122071
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

▼

Apple

macOS

Version: unspecified < 14.7

Apple	visionOS	Version: unspecified < 2.3
Apple	tvOS	Version: unspecified < 18.3
Apple	macOS	Version: unspecified < 15.3
Apple	iPadOS	Version: unspecified < 17.7
Apple	watchOS	Version: unspecified < 11.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24163",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T15:27:50.828926Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T19:44:36.835Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Parsing a file may lead to an unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:54.808Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122069"
        },
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122072"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122067"
        },
        {
          "url": "https://support.apple.com/en-us/122071"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24163",
    "datePublished": "2025-01-27T21:45:54.808Z",
    "dateReserved": "2025-01-17T00:00:44.988Z",
    "dateUpdated": "2025-03-18T19:44:36.835Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-54543

Vulnerability from cvelistv5

Published

2025-01-27 21:46

Modified

2025-02-05 15:24

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption.

References

▼	URL	Tags
	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54543",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-05T15:24:18.396574Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-05T15:24:22.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:46:30.578Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54543",
    "datePublished": "2025-01-27T21:46:30.578Z",
    "dateReserved": "2024-12-03T22:50:35.512Z",
    "dateUpdated": "2025-02-05T15:24:22.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24257

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 13:17

Severity ?

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Summary

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to cause unexpected system termination or write kernel memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24257",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T19:09:50.687666Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T13:17:38.266Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to cause unexpected system termination or write kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination or write kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:33.089Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24257",
    "datePublished": "2025-03-31T22:22:33.089Z",
    "dateReserved": "2025-01-17T00:00:45.014Z",
    "dateUpdated": "2025-04-03T13:17:38.266Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-48958

Vulnerability from cvelistv5

Published

2024-10-10 00:00

Modified

2024-10-10 20:35

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

References

▼	URL	Tags
	https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5
	https://github.com/libarchive/libarchive/pull/2148

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "libarchive",
            "vendor": "libarchive",
            "versions": [
              {
                "lessThan": "3.7.5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-48958",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-10T20:35:05.629427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-10T20:35:53.287Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-10T01:21:04.109520",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5"
        },
        {
          "url": "https://github.com/libarchive/libarchive/pull/2148"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-48958",
    "datePublished": "2024-10-10T00:00:00",
    "dateReserved": "2024-10-10T00:00:00",
    "dateUpdated": "2024-10-10T20:35:53.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-56171

Vulnerability from cvelistv5

Published

2025-02-18 00:00

Modified

2025-03-28 15:03

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Summary

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

References

▼	URL	Tags
	https://gitlab.gnome.org/GNOME/libxml2/-/issues/828

Impacted products

	Vendor	Product	Version
	xmlsoft	libxml2	Version: 0 ≤ Version: 2.13.0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-56171",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-19T16:26:31.484719Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-19T16:26:41.297Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-03-28T15:03:06.595Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250328-0010/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "libxml2",
          "vendor": "xmlsoft",
          "versions": [
            {
              "lessThan": "2.12.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.6",
              "status": "affected",
              "version": "2.13.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.12.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.13.6",
                  "versionStartIncluding": "2.13.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T22:10:20.934Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/828"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-56171",
    "datePublished": "2025-02-18T00:00:00.000Z",
    "dateReserved": "2024-12-18T00:00:00.000Z",
    "dateUpdated": "2025-03-28T15:03:06.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24264

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:18

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24264",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:17:25.800640Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:18:17.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:36.148Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24264",
    "datePublished": "2025-03-31T22:23:36.148Z",
    "dateReserved": "2025-01-17T00:00:45.016Z",
    "dateUpdated": "2025-04-01T13:18:17.203Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30425

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:32

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Summary

This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30425",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:30:55.559638Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:32:24.826Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may be able to track users in Safari private browsing mode",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:50.104Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30425",
    "datePublished": "2025-03-31T22:22:50.104Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-02T13:32:24.826Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24238

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-02 03:55

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24238",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T03:55:21.679Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to gain elevated privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:09.471Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24238",
    "datePublished": "2025-03-31T22:24:09.471Z",
    "dateReserved": "2025-01-17T00:00:45.007Z",
    "dateUpdated": "2025-04-02T03:55:21.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31182

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31182",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:29:59.647862Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:30:51.884Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to delete files for which it does not have permission",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:56.605Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31182",
    "datePublished": "2025-03-31T22:22:56.605Z",
    "dateReserved": "2025-03-27T16:13:58.310Z",
    "dateUpdated": "2025-04-01T14:30:51.884Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31192

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:13

Severity ?

6.7 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:17:45.905890Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-305",
                "description": "CWE-305 Authentication Bypass by Primary Weakness",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:13:57.590Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to access sensor information without user consent",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:30.090Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31192",
    "datePublished": "2025-03-31T22:22:30.090Z",
    "dateReserved": "2025-03-27T16:13:58.312Z",
    "dateUpdated": "2025-04-03T20:13:57.590Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24182

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 19:41

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24182",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:40:34.727397Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:41:30.848Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted font may result in the disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:50.082Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24182",
    "datePublished": "2025-03-31T22:23:50.082Z",
    "dateReserved": "2025-01-17T00:00:44.993Z",
    "dateUpdated": "2025-04-01T19:41:30.848Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30463

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:17

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

macOS

Version: unspecified < 15.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30463",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:16:49.115468Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:17:50.780Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:05.846Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30463",
    "datePublished": "2025-03-31T22:23:05.846Z",
    "dateReserved": "2025-03-22T00:04:43.722Z",
    "dateUpdated": "2025-04-01T14:17:50.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30429

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-02 13:07

Severity ?

6.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Summary

A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30429",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T13:06:37.390836Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T13:07:41.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:41.739Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30429",
    "datePublished": "2025-03-31T22:22:41.739Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-02T13:07:41.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24180

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 14:00

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24180",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:56:02.656511Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-601",
                "description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:00:32.367Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:12.556Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24180",
    "datePublished": "2025-03-31T22:23:12.556Z",
    "dateReserved": "2025-01-17T00:00:44.993Z",
    "dateUpdated": "2025-04-01T14:00:32.367Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24211

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 20:51

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T20:50:59.364265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T20:51:42.514Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:15.300Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24211",
    "datePublished": "2025-03-31T22:23:15.300Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-01T20:51:42.514Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-54508

Vulnerability from cvelistv5

Published

2024-12-11 22:58

Modified

2024-12-16 18:37

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

▼	URL	Tags
	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54508",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-16T18:36:10.312854Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-16T18:37:55.936Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T22:58:14.487Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54508",
    "datePublished": "2024-12-11T22:58:14.487Z",
    "dateReserved": "2024-12-03T22:50:35.502Z",
    "dateUpdated": "2024-12-16T18:37:55.936Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-31183

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 13:49

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31183",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T13:48:30.897543Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T13:49:56.649Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:19.820Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31183",
    "datePublished": "2025-03-31T22:23:19.820Z",
    "dateReserved": "2025-03-27T16:13:58.311Z",
    "dateUpdated": "2025-04-01T13:49:56.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24202

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 16:07

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple

macOS

Version: unspecified < 15.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24202",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T16:01:38.802033Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:07:22.477Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:02.678Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24202",
    "datePublished": "2025-03-31T22:24:02.678Z",
    "dateReserved": "2025-01-17T00:00:44.999Z",
    "dateUpdated": "2025-04-01T16:07:22.477Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24198

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 18:13

Severity ?

6.6 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access may be able to use Siri to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24198",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T18:13:20.724903Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T18:13:50.003Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access may be able to use Siri to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with physical access may be able to use Siri to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:38.971Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24198",
    "datePublished": "2025-03-31T22:23:38.971Z",
    "dateReserved": "2025-01-17T00:00:44.998Z",
    "dateUpdated": "2025-04-01T18:13:50.003Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24113

Vulnerability from cvelistv5

Published

2025-01-27 21:45

Modified

2025-01-31 21:40

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Summary

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing.

References

▼	URL	Tags
	https://support.apple.com/en-us/122073
	https://support.apple.com/en-us/122068
	https://support.apple.com/en-us/122074
	https://support.apple.com/en-us/122066

Impacted products

Vendor

Product

Version

▼

Apple

visionOS

Version: unspecified < 2.3

Apple	macOS	Version: unspecified < 15.3
Apple	Safari	Version: unspecified < 18.3
Apple	iOS and iPadOS	Version: unspecified < 18.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24113",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-30T21:31:48.960842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-31T21:40:20.048Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to user interface spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-27T21:45:26.736Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122073"
        },
        {
          "url": "https://support.apple.com/en-us/122068"
        },
        {
          "url": "https://support.apple.com/en-us/122074"
        },
        {
          "url": "https://support.apple.com/en-us/122066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24113",
    "datePublished": "2025-01-27T21:45:26.736Z",
    "dateReserved": "2025-01-17T00:00:44.970Z",
    "dateUpdated": "2025-01-31T21:40:20.048Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24217

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:50

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

	Apple	iOS and iPadOS	Version: unspecified < 18.4
	Apple	macOS	Version: unspecified < 15.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24217",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:49:50.330155Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:50:44.832Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:40.756Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24217",
    "datePublished": "2025-03-31T22:22:40.756Z",
    "dateReserved": "2025-01-17T00:00:45.003Z",
    "dateUpdated": "2025-04-01T14:50:44.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24193

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 16:01

Severity ?

2.4 (Low) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371

Impacted products

	Vendor	Product	Version
	Apple	iOS and iPadOS	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 2.4,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24193",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:59:27.308700Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:01:01.647Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:03.607Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24193",
    "datePublished": "2025-03-31T22:24:03.607Z",
    "dateReserved": "2025-01-17T00:00:44.997Z",
    "dateUpdated": "2025-04-01T16:01:01.647Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24216

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:16

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Summary

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24216",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:13:08.369709Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-508",
                "description": "CWE-508 Non-Replicating Malicious Code",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:16:06.043Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:35.858Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24216",
    "datePublished": "2025-03-31T22:22:35.858Z",
    "dateReserved": "2025-01-17T00:00:45.003Z",
    "dateUpdated": "2025-04-03T20:16:06.043Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24213

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-03 17:46

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

This issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A type confusion issue could lead to memory corruption.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122379

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	Safari	Version: unspecified < 18.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24213",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T03:55:29.888734Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T17:46:55.488Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A type confusion issue could lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A type confusion issue could lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:48.296Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122379"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24213",
    "datePublished": "2025-03-31T22:23:48.296Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-03T17:46:55.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24205

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-02 15:20

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24205",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:53:06.180161Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:20:47.576Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access user-sensitive data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:47.476Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24205",
    "datePublished": "2025-03-31T22:23:47.476Z",
    "dateReserved": "2025-01-17T00:00:45.000Z",
    "dateUpdated": "2025-04-02T15:20:47.576Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30430

Vulnerability from cvelistv5

Published

2025-03-31 22:23

Modified

2025-04-01 19:39

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication.

References

▼	URL	Tags
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

iOS and iPadOS

Version: unspecified < 18.4

	Apple	macOS	Version: unspecified < 15.4
	Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30430",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T19:37:06.283551Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T19:39:13.322Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Password autofill may fill in passwords after failing authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:23:50.933Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30430",
    "datePublished": "2025-03-31T22:23:50.933Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-01T19:39:13.322Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-30432

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-03 20:13

Severity ?

6.4 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Summary

A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30432",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:24:13.710662Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-03T20:13:11.090Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:28.969Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30432",
    "datePublished": "2025-03-31T22:22:28.969Z",
    "dateReserved": "2025-03-22T00:04:43.716Z",
    "dateUpdated": "2025-04-03T20:13:11.090Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24190

Vulnerability from cvelistv5

Published

2025-03-31 22:22

Modified

2025-04-01 14:46

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	iPadOS	Version: unspecified < 17.7
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24190",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T14:46:00.795562Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T14:46:43.406Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:22:42.664Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24190",
    "datePublished": "2025-03-31T22:22:42.664Z",
    "dateReserved": "2025-01-17T00:00:44.996Z",
    "dateUpdated": "2025-04-01T14:46:43.406Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24203

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 15:02

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.

References

▼	URL	Tags
	https://support.apple.com/en-us/122372
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122374
	https://support.apple.com/en-us/122375

Impacted products

Vendor

Product

Version

▼

Apple

iPadOS

Version: unspecified < 17.7

Apple	macOS	Version: unspecified < 15.4
Apple	macOS	Version: unspecified < 14.7
Apple	macOS	Version: unspecified < 13.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24203",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T15:01:39.243398Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T15:02:14.564Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to modify protected parts of the file system",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:18.620Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122372"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122374"
        },
        {
          "url": "https://support.apple.com/en-us/122375"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24203",
    "datePublished": "2025-03-31T22:24:18.620Z",
    "dateReserved": "2025-01-17T00:00:45.000Z",
    "dateUpdated": "2025-04-01T15:02:14.564Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2025-24214

Vulnerability from cvelistv5

Published

2025-03-31 22:24

Modified

2025-04-01 16:09

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

▼	URL	Tags
	https://support.apple.com/en-us/122377
	https://support.apple.com/en-us/122371
	https://support.apple.com/en-us/122373
	https://support.apple.com/en-us/122378

Impacted products

Vendor

Product

Version

▼

Apple

tvOS

Version: unspecified < 18.4

Apple	iOS and iPadOS	Version: unspecified < 18.4
Apple	macOS	Version: unspecified < 15.4
Apple	visionOS	Version: unspecified < 2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-24214",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-01T16:07:48.610305Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-01T16:09:27.579Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-31T22:24:01.477Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122377"
        },
        {
          "url": "https://support.apple.com/en-us/122371"
        },
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-24214",
    "datePublished": "2025-03-31T22:24:01.477Z",
    "dateReserved": "2025-01-17T00:00:45.002Z",
    "dateUpdated": "2025-04-01T16:09:27.579Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-9681

Vulnerability from cvelistv5

Published

2024-11-06 07:47

Modified

2024-12-13 13:09

Severity ?

5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Summary

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host. (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.) When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache. The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended.

References

▼	URL	Tags
	https://curl.se/docs/CVE-2024-9681.json
	https://curl.se/docs/CVE-2024-9681.html
	https://hackerone.com/reports/2764830

Impacted products

	Vendor	Product	Version
	curl	curl	Version: 8.10.1 ≤ 8.10.1 Version: 8.10.0 ≤ 8.10.0 Version: 8.9.1 ≤ 8.9.1 Version: 8.9.0 ≤ 8.9.0 Version: 8.8.0 ≤ 8.8.0 Version: 8.7.1 ≤ 8.7.1 Version: 8.7.0 ≤ 8.7.0 Version: 8.6.0 ≤ 8.6.0 Version: 8.5.0 ≤ 8.5.0 Version: 8.4.0 ≤ 8.4.0 Version: 8.3.0 ≤ 8.3.0 Version: 8.2.1 ≤ 8.2.1 Version: 8.2.0 ≤ 8.2.0 Version: 8.1.2 ≤ 8.1.2 Version: 8.1.1 ≤ 8.1.1 Version: 8.1.0 ≤ 8.1.0 Version: 8.0.1 ≤ 8.0.1 Version: 8.0.0 ≤ 8.0.0 Version: 7.88.1 ≤ 7.88.1 Version: 7.88.0 ≤ 7.88.0 Version: 7.87.0 ≤ 7.87.0 Version: 7.86.0 ≤ 7.86.0 Version: 7.85.0 ≤ 7.85.0 Version: 7.84.0 ≤ 7.84.0 Version: 7.83.1 ≤ 7.83.1 Version: 7.83.0 ≤ 7.83.0 Version: 7.82.0 ≤ 7.82.0 Version: 7.81.0 ≤ 7.81.0 Version: 7.80.0 ≤ 7.80.0 Version: 7.79.1 ≤ 7.79.1 Version: 7.79.0 ≤ 7.79.0 Version: 7.78.0 ≤ 7.78.0 Version: 7.77.0 ≤ 7.77.0 Version: 7.76.1 ≤ 7.76.1 Version: 7.76.0 ≤ 7.76.0 Version: 7.75.0 ≤ 7.75.0 Version: 7.74.0 ≤ 7.74.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-12-13T13:09:28.285Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/11/06/2"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241213-0006/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "curl",
            "vendor": "curl",
            "versions": [
              {
                "lessThan": "7.74.0",
                "status": "unaffected",
                "version": "0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "8.10.1",
                "status": "affected",
                "version": "7.74.0",
                "versionType": "semver"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8.11.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T16:16:59.652768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:09:00.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.80.0",
              "status": "affected",
              "version": "7.80.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.1",
              "status": "affected",
              "version": "7.79.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.0",
              "status": "affected",
              "version": "7.79.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.78.0",
              "status": "affected",
              "version": "7.78.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.77.0",
              "status": "affected",
              "version": "7.77.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.1",
              "status": "affected",
              "version": "7.76.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.0",
              "status": "affected",
              "version": "7.76.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.75.0",
              "status": "affected",
              "version": "7.75.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.74.0",
              "status": "affected",
              "version": "7.74.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "newfunction"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Stenberg"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl\u0027s HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1025 Comparison Using Wrong Factors",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-06T07:47:20.162Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "name": "json",
          "url": "https://curl.se/docs/CVE-2024-9681.json"
        },
        {
          "name": "www",
          "url": "https://curl.se/docs/CVE-2024-9681.html"
        },
        {
          "name": "issue",
          "url": "https://hackerone.com/reports/2764830"
        }
      ],
      "title": "HSTS subdomain overwrites parent cache entry"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2024-9681",
    "datePublished": "2024-11-06T07:47:20.162Z",
    "dateReserved": "2024-10-09T07:57:47.318Z",
    "dateUpdated": "2024-12-13T13:09:28.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_ncscnl

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags