CVE-2025-24249

A permissions issue was addressed with additional sandbox restrictions

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky permissions issue could let an app peek into file system paths it shouldn't see! It's like giving a visitor a map of your house, but with some doors left unlocked. 🔥 Think of it as a hotel guest who can access the staff-only areas just by asking for directions — this vulnerability could let apps check for the existence of sensitive files, violating your privacy! If exploited, an attacker could potentially locate sensitive files and directories on your system, leading to unauthorized access or data breaches. This could be absolutely devastating, especially if confidential information is exposed!

Put simply

Think of it as a hotel guest who can access the staff-only areas just by asking for directions — this vulnerability could let apps check for the existence of sensitive files, violating your privacy! This vulnerability arises from insufficient sandbox restrictions, allowing apps to query the existence of arbitrary paths on the file system. It poses a significant risk, especially in environments where sensitive data is stored.

What to do

If exploited, an attacker could potentially locate sensitive files and directories on your system, leading to unauthorized access or data breaches. This could be absolutely devastating, especially if confidential information is exposed! To protect yourself, update your macOS to Sequoia 15.4, Sonoma 14.7.5, or Ventura 13.7.5 immediately. It's crucial to regularly check for system updates and apply them to ensure your device's security remains robust. 🛡️ You've got this! Stay vigilant and keep your system updated for a safer experience. 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00878 · 58.7th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    A permissions issue was addressed with additional sandbox restrictions
    cvelistv5