VulnerabilityModified
CVE-2025-24092
This issue was addressed with improved data protection.
MEDIUM 5.5EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read sensitive location information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.25% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/122068Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122069Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jan/15
- http://seclists.org/fulldisclosure/2025/Jan/16
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.