Elevated Privileges Vulnerability in macOS Sequoia by Apple
CVE-2025-24135

9.8CRITICAL

Key Information:

Vendor
Apple
Status
Mac OS
Vendor
CVE Published:
27 January 2025

Summary

A vulnerability in macOS Sequoia allowed apps to potentially gain elevated privileges due to inadequate message validation. This issue has been addressed in version 15.3 of macOS Sequoia, enhancing security measures to prevent unauthorized access and ensuring that applications cannot exploit this weakness.

Affected Version(s)

macOS < 15.3

References

https://support.apple.com/en-us/122068

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.