Network Share Vulnerability in macOS by Apple
CVE-2025-31237

7.5HIGH

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
12 May 2025

What is CVE-2025-31237?

This vulnerability in Apple's macOS could allow an attacker to cause system termination by mounting a maliciously crafted AFP network share. Apple has addressed this issue in the latest versions of macOS, which enhance the checks during the mounting process to mitigate potential exploitation.

Affected Version(s)

macOS < 15.5

macOS < 14.7

macOS < 13.7

References

https://support.apple.com/en-us/122716
https://support.apple.com/en-us/122717
https://support.apple.com/en-us/122718

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.