The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/122373 | Vendor Advisory |
| https://support.apple.com/en-us/122374 | Vendor Advisory |
| https://support.apple.com/en-us/122375 | Vendor Advisory |
| http://seclists.org/fulldisclosure/2025/Apr/10 | |
| http://seclists.org/fulldisclosure/2025/Apr/8 | |
| http://seclists.org/fulldisclosure/2025/Apr/9 |
Configurations
Configuration 1 (hide)
|
History
02 Apr 2026, 19:19
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system. |
03 Nov 2025, 22:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Apr 2025, 13:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/122373 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/122374 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/122375 - Vendor Advisory | |
| First Time |
Apple macos
Apple |
|
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
02 Apr 2025, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| Summary |
|
31 Mar 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-31 23:15
Updated : 2026-04-02 19:19
NVD link : CVE-2025-24261
Mitre link : CVE-2025-24261
CVE.ORG link : CVE-2025-24261
JSON object : View
Products Affected
apple
- macos
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor