CVE-2025-24093

Опубликовано: 27 янв. 2025

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.

Ссылки

https://support.apple.com/en-us/122069
Release Notes
Vendor Advisory
https://support.apple.com/en-us/122070
Release Notes
Vendor Advisory
https://support.apple.com/en-us/122373
http://seclists.org/fulldisclosure/2025/Apr/8
http://seclists.org/fulldisclosure/2025/Jan/16
http://seclists.org/fulldisclosure/2025/Jan/17

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7.3 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7.3 (исключая)

EPSS

Процентиль: 55%

0.0081

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-276

Связанные уязвимости

GHSA-vw88-wc28-c2h6

CVSS3: 9.8

github

больше 1 года назад

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent.

BDU:2025-01380

CVSS3: 5.3

fstec