Medium · 5.5 CVE-2025-24191 EUVD-2025-9010GHSA-75p9-34jj-xrg5

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to…

Published Mar 31, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 15.4	15.4

Advisories 2

WID-SEC-2025-0668 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2026
NCSC-2025-0102 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Apr 1, 2025

References

https://support.apple.com/en-us/122373

EUVD	v3.1	5.5
CISA-ADP	v3.1	5.5