CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
appleCNA
---
---
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
VendorProductVersion
appleipados
𝑥
< 17.7.6
appleipados
18.0 ≤
𝑥
< 18.4
appleiphone_os
𝑥
< 18.4
applemacos
𝑥
< 13.7.5
applemacos
14.0 ≤
𝑥
< 14.7.5
applemacos
15.0 ≤
𝑥
< 15.4
appletvos
𝑥
< 18.4
𝑥
= Vulnerable software versions