CVE-2025-24170

Опубликовано: 31 мар. 2025

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.

Ссылки

https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122374
Release Notes
Vendor Advisory
https://support.apple.com/en-us/122375
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2025/Apr/10
http://seclists.org/fulldisclosure/2025/Apr/9

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7.5 (исключая)

EPSS

Процентиль: 18%

0.00261

Низкий

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

GHSA-p4vm-6crq-4pg4

CVSS3: 7.8

github

больше 1 года назад

A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An app may be able to gain root privileges.

BDU:2025-05535

CVSS3: 9.8

fstec