CVE-2025-24093

A permissions issue was addressed with additional restrictions

Critical · published January 27, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

🚨 A permissions gap means your apps might breach your data privacy! They could access removable volumes without a user's go-ahead. 🔥 Think of it like a hotel room that doesn’t lock properly; anyone with a keycard can waltz in without your approval, snooping around your personal belongings. That’s the sneaky situation here with some macOS apps! An attacker could exploit this permissions issue to access sensitive files or data on external drives, potentially leading to data theft or compromise of your personal information. This is absolutely devastating for user privacy and security, as it opens the door to unauthorized access without any notice.

Put simply

Think of it like a hotel room that doesn’t lock properly; anyone with a keycard can waltz in without your approval, snooping around your personal belongings. That’s the sneaky situation here with some macOS apps! This vulnerability arises from insufficient restrictions on app permissions, allowing apps to access removable volumes without user consent. This lack of proper checks can lead to unauthorized data exposure.

What to do

An attacker could exploit this permissions issue to access sensitive files or data on external drives, potentially leading to data theft or compromise of your personal information. This is absolutely devastating for user privacy and security, as it opens the door to unauthorized access without any notice. Upgrade your macOS to Sequoia 15.4, Sonoma 14.7.3, or Ventura 13.7.3 immediately to close this critical hole. Also, review your app permissions frequently to ensure no sneaky access is happening without your permission! 🔒 You’ve got this! With these steps, you’ll be one step closer to securing your data! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00810 · 56.5th percentile
Published
2025-01-27T21:45Z
EPSS history
Timeline
  • 27 JAN 21:45Z
    A permissions issue was addressed with additional restrictions
    cvelistv5