A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An attacker may gain access to protected parts of the file system.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/122716 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/122717 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/122718 | Release Notes Vendor Advisory |
| http://seclists.org/fulldisclosure/2025/May/7 | |
| http://seclists.org/fulldisclosure/2025/May/8 | |
| http://seclists.org/fulldisclosure/2025/May/9 |
Configurations
Configuration 1 (hide)
|
History
03 Nov 2025, 20:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
27 May 2025, 21:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/122716 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/122717 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/122718 - Release Notes, Vendor Advisory | |
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | |
| First Time |
Apple macos
Apple |
13 May 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-284 |
13 May 2025, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
12 May 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-12 22:15
Updated : 2025-11-03 20:18
NVD link : CVE-2025-31247
Mitre link : CVE-2025-31247
CVE.ORG link : CVE-2025-31247
JSON object : View
Products Affected
apple
- macos
CWE
CWE-284
Improper Access Control