CVE-2025-24274

Description

An input validation issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. A malicious app may be able to gain root privileges.

Reserved 2025-01-17 | Published 2025-05-12 | Updated 2025-05-13 | Assigner apple

Problem types

A malicious app may be able to gain root privileges

Product status

Any version before 15.5
affected

Any version before 14.7
affected

Any version before 13.7
affected

References

support.apple.com/en-us/122716

support.apple.com/en-us/122717

support.apple.com/en-us/122718

cve.org (CVE-2025-24274)

nvd.nist.gov (CVE-2025-24274)

Download JSON