Information Disclosure Vulnerability in macOS Sequoia by Apple
CVE-2025-31236

5.5MEDIUM

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
12 May 2025

What is CVE-2025-31236?

An information disclosure vulnerability has been identified in macOS Sequoia that could allow unauthorized access to sensitive user data. Apple has addressed this issue with enhanced privacy controls in version 15.5, ensuring better protection against potential data exposure. Users are encouraged to update their systems to maintain security and safeguard personal information from potential exploitation.

Affected Version(s)

macOS < 15.5

References

https://support.apple.com/en-us/122716

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.