CVE-2025-24250

This issue was addressed with improved access restrictions

Critical ยท published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

๐Ÿšจ A malicious app could act as a fake HTTPS proxy and snoop on your sensitive data! ๐Ÿ”ฅ Think of your data like a secret recipe being shared with a waiter who pretends to be from your favorite restaurant โ€” they take your order but might actually be passing it to someone else! If exploited, this vulnerability could lead to catastrophic data breaches, putting your private information in the hands of attackers. Imagine losing your passwords, financial details, and personal messages without even knowing it. This is a severe risk, especially since it's so easy to fall victim to a trusted-looking app!

Put simply

Think of your data like a secret recipe being shared with a waiter who pretends to be from your favorite restaurant โ€” they take your order but might actually be passing it to someone else! This vulnerability arises from insufficient access restrictions allowing a malicious application to intercept and access sensitive user data while acting as an HTTPS proxy.

What to do

If exploited, this vulnerability could lead to catastrophic data breaches, putting your private information in the hands of attackers. Imagine losing your passwords, financial details, and personal messages without even knowing it. This is a severe risk, especially since it's so easy to fall victim to a trusted-looking app! Update to macOS Sequoia 15.4, macOS Sonoma 14.7.5, or macOS Ventura 13.7.5 as soon as possible to patch this vulnerability. Always be cautious of apps requesting proxy permissions and vet them thoroughly before installation. ๐Ÿ›ก๏ธ You've got this! Stay vigilant, keep your systems updated, and you'll have the internet's security back in your hands! ๐Ÿ˜„

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00949 ยท 60.8th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    This issue was addressed with improved access restrictions
    cvelistv5