Logic Issue in macOS Ventura and Sonoma Allowing Elevated Access
CVE-2025-24170

7.8HIGH

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
31 March 2025

What is CVE-2025-24170?

A logic issue in macOS Ventura and Sonoma has been identified, which involves improper file handling potentially allowing unauthorized applications to gain root privileges. This could expose users to security risks, as malicious software might exploit this flaw to execute sensitive operations without appropriate permissions. The issue has been addressed in updates for both macOS Ventura and Sonoma, ensuring enhanced security for users who install the latest versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

macOS < 14.7

macOS < 13.7

References

https://support.apple.com/en-us/122374
https://support.apple.com/en-us/122375

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.