Critical · 9.8 CVE-2025-24232 EUVD-2025-8970GHSA-xxcr-5qmm-8wfp

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 1…

Published Mar 31, 2025 · Updated Jul 22, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access arbitrary files.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 13.7.5, < 14.7.5, < 15.4	13.7.5

Advisories 2

WID-SEC-2025-0668 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2026
NCSC-2025-0102 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Apr 1, 2025

References

https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122374
https://support.apple.com/en-us/122375

EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8