CVE-2025-24143

EPSS 0.09%
Veröffentlicht 27.01.2025 22:15:18
Zuletzt bearbeitet 04.02.2025 22:15:42
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 18.3

Apple ≫ iPadOS Version < 18.3

Apple ≫ macOS Version < 15.3

Apple ≫ visionOS Version < 2.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.266

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://support.apple.com/en-us/122066

Release Notes

https://support.apple.com/en-us/122068

Release Notes

https://support.apple.com/en-us/122073

Release Notes

https://support.apple.com/en-us/122074

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2025-24143

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-24143

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-24143

EUVD