CVE-2025-30461

An access issue was addressed with additional sandbox restrictions on the system pasteboards

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

🚨 A sneaky access issue could let apps reach into your protected user data! This is a critical vulnerability in macOS Sequoia that demands your attention. 🔥 Think of this like a hotel where unauthorized staff can suddenly peek into guest rooms without permission. With these additional sandbox restrictions, it’s like installing a security system that keeps everyone out who shouldn’t be there! An attacker could exploit this flaw to access sensitive information from your clipboard or shared data without your knowledge. This could lead to data breaches, privacy violations, and compromised user accounts — absolutely devastating for anyone relying on secure data management!

Put simply

Think of this like a hotel where unauthorized staff can suddenly peek into guest rooms without permission. With these additional sandbox restrictions, it’s like installing a security system that keeps everyone out who shouldn’t be there! The vulnerability stems from insufficient restrictions on the system pasteboards, allowing apps to access protected user data without proper authorization. Apple has implemented additional sandbox restrictions to prevent unauthorized access.

What to do

An attacker could exploit this flaw to access sensitive information from your clipboard or shared data without your knowledge. This could lead to data breaches, privacy violations, and compromised user accounts — absolutely devastating for anyone relying on secure data management! Update your macOS to Sequoia 15.4 immediately to close this security gap. Encourage your team to review app permissions and data access practices to enhance overall security. Regular audits can help ensure no app has excessive access rights! You've got this! By staying vigilant and updating promptly, you'll keep your data safe and secure. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00663 · 51.1th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    An access issue was addressed with additional sandbox restrictions on the system pasteboards
    cvelistv5