5.5

CVE-2025-24122

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS Version < 13.7.3
Apple ≫ macOS Version >= 14.0 < 14.7.3
Apple ≫ macOS Version >= 15.0 < 15.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.155
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/en-us/122069
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122070
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122068
Vendor Advisory
Release Notes
http://seclists.org/fulldisclosure/2025/Jan/16
http://seclists.org/fulldisclosure/2025/Jan/17
http://seclists.org/fulldisclosure/2025/Jan/15