CVE-2025-24259

This issue was addressed with additional entitlement checks

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

🚨 A sneaky app could now rummage through your Safari bookmarks, no entitlement check needed! 😱 Think of it like a restaurant where a waiter can check out your order without asking — what happens when they start serving themselves from your table? That's how this vulnerability operates, and it's absolutely alarming! This critical vulnerability allows attackers to access your sensitive Safari bookmarks, potentially exposing private information and leading to further exploits. If an attacker knows what sites you visit and what data you save, it could be devastating for your privacy and security! 🔥

Put simply

Think of it like a restaurant where a waiter can check out your order without asking — what happens when they start serving themselves from your table? That's how this vulnerability operates, and it's absolutely alarming! This flaw involves a lack of entitlement checks, which could allow an app to access Safari bookmarks without proper authorization, making it easier for unauthorized access. Simply put, this means an app can bypass security measures designed to protect your personal data.

What to do

This critical vulnerability allows attackers to access your sensitive Safari bookmarks, potentially exposing private information and leading to further exploits. If an attacker knows what sites you visit and what data you save, it could be devastating for your privacy and security! 🔥 Update your devices immediately to iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, or macOS Ventura 13.7.5. Ensure all applications are running the latest versions and consider reviewing app permissions for any suspicious activity. 🛡️ You've got this! By following these steps, you're taking the right action to secure your privacy. Let's keep our devices safe! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00770 · 55.2th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    This issue was addressed with additional entitlement checks
    cvelistv5