CVE-2025-24204

The issue was addressed with improved checks

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

🚨 A loophole in macOS Sequoia could let apps sneak away with your private data—yikes! 🔥 Think of it like a hotel where the front desk accidentally hands out master room keys to random guests, allowing them access to any room without authorization. This vulnerability opens a door for apps to reach into protected user information without the right permissions. An attacker could exploit this vulnerability to access sensitive user data, putting personal information at risk and potentially leading to identity theft or data breaches. This is absolutely devastating for users who trust their devices to keep their data safe!

Put simply

Think of it like a hotel where the front desk accidentally hands out master room keys to random guests, allowing them access to any room without authorization. This vulnerability opens a door for apps to reach into protected user information without the right permissions. This vulnerability arises from inadequate checks that allow unauthorized apps to access protected user data on macOS, creating a huge security gap.

What to do

An attacker could exploit this vulnerability to access sensitive user data, putting personal information at risk and potentially leading to identity theft or data breaches. This is absolutely devastating for users who trust their devices to keep their data safe! Immediately update to macOS Sequoia 15.4 to close this security hole and ensure that only authorized applications can access sensitive data. Regularly check for updates to stay ahead of future vulnerabilities! This is fixable! Keep your systems updated, and you’ll be securing your data like a pro. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02247 · 82.8th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    The issue was addressed with improved checks
    cvelistv5