{ "fix": "Sequoia 15.4", "url": "https://patchblox.com/security/fix/macos/sequoia-15.4", "summary": "Sequoia 15.4, released March 31, 2025, fixes 158 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "macos", "type": "os-version", "title": "Sequoia 15.4", "released": "2025-03-31T00:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2025-24204, rated Critical", "supported": true, "cveCount": 158, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.02527, "maxCvss": 9.8, "vendorAdvisory": "https://support.apple.com/en-us/122373", "appliesTo": [ { "product": "Sequoia", "productUrl": "https://patchblox.com/security/product/macos/sequoia", "fixedVersion": "15.4", "supported": true } ], "cves": [ { "cveId": "CVE-2025-24204", "url": "https://patchblox.com/security/cve/CVE-2025-24204", "title": "Kernel: An app may be able to access protected user data", "component": "Kernel", "impact": "An app may be able to access protected user data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.02292, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24190", "url": "https://patchblox.com/security/cve/CVE-2025-24190", "title": "CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory", "component": "CoreMedia", "impact": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.0192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24211", "url": "https://patchblox.com/security/cve/CVE-2025-24211", "title": "CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory", "component": "CoreMedia", "impact": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.0192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24230", "url": "https://patchblox.com/security/cve/CVE-2025-24230", "title": "CoreAudio: Playing a malicious audio file may lead to an unexpected app termination", "component": "CoreAudio", "impact": "Playing a malicious audio file may lead to an unexpected app termination", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.0192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24237", "url": "https://patchblox.com/security/cve/CVE-2025-24237", "title": "BiometricKit: An app may be able to cause unexpected system termination", "component": "BiometricKit", "impact": "An app may be able to cause unexpected system termination", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01637, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24178", "url": "https://patchblox.com/security/cve/CVE-2025-24178", "title": "libxpc: An app may be able to break out of its sandbox", "component": "libxpc", "impact": "An app may be able to break out of its sandbox", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01604, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30433", "url": "https://patchblox.com/security/cve/CVE-2025-30433", "title": "Shortcuts: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app", "component": "Shortcuts", "impact": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31182", "url": "https://patchblox.com/security/cve/CVE-2025-31182", "title": "libxpc: An app may be able to delete files for which it does not have permission", "component": "libxpc", "impact": "An app may be able to delete files for which it does not have permission", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30426", "url": "https://patchblox.com/security/cve/CVE-2025-30426", "title": "NetworkExtension: An app may be able to enumerate a user\u0027s installed apps", "component": "NetworkExtension", "impact": "An app may be able to enumerate a user\u0027s installed apps", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31183", "url": "https://patchblox.com/security/cve/CVE-2025-31183", "title": "Siri: An app may be able to access sensitive user data", "component": "Siri", "impact": "An app may be able to access sensitive user data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30457", "url": "https://patchblox.com/security/cve/CVE-2025-30457", "title": "SystemMigration: A malicious app may be able to create symlinks to protected regions of the disk", "component": "SystemMigration", "impact": "A malicious app may be able to create symlinks to protected regions of the disk", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24256", "url": "https://patchblox.com/security/cve/CVE-2025-24256", "title": "GPU Drivers: An app may be able to disclose kernel memory", "component": "GPU Drivers", "impact": "An app may be able to disclose kernel memory", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01228, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30430", "url": "https://patchblox.com/security/cve/CVE-2025-30430", "title": "Authentication Services: Password autofill may fill in passwords after failing authentication", "component": "Authentication Services", "impact": "Password autofill may fill in passwords after failing authentication", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24238", "url": "https://patchblox.com/security/cve/CVE-2025-24238", "title": "libxpc: An app may be able to gain elevated privileges", "component": "libxpc", "impact": "An app may be able to gain elevated privileges", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24231", "url": "https://patchblox.com/security/cve/CVE-2025-24231", "title": "Software Update: An app may be able to modify protected parts of the file system", "component": "Software Update", "impact": "An app may be able to modify protected parts of the file system", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24232", "url": "https://patchblox.com/security/cve/CVE-2025-24232", "title": "NSDocument: A malicious app may be able to access arbitrary files", "component": "NSDocument", "impact": "A malicious app may be able to access arbitrary files", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30452", "url": "https://patchblox.com/security/cve/CVE-2025-30452", "title": "Sandbox: An input validation issue was addressed", "component": "Sandbox", "impact": "An input validation issue was addressed", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30465", "url": "https://patchblox.com/security/cve/CVE-2025-30465", "title": "Shortcuts: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app", "component": "Shortcuts", "impact": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01073, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24266", "url": "https://patchblox.com/security/cve/CVE-2025-24266", "title": "Xsan: An app may be able to cause unexpected system termination", "component": "Xsan", "impact": "An app may be able to cause unexpected system termination", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01069, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24181", "url": "https://patchblox.com/security/cve/CVE-2025-24181", "title": "Sandbox: An app may be able to access protected user data", "component": "Sandbox", "impact": "An app may be able to access protected user data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01055, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24207", "url": "https://patchblox.com/security/cve/CVE-2025-24207", "title": "Storage Management: An app may be able to enable iCloud storage features without user consent", "component": "Storage Management", "impact": "An app may be able to enable iCloud storage features without user consent", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01055, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24233", "url": "https://patchblox.com/security/cve/CVE-2025-24233", "title": "AppleMobileFileIntegrity: A malicious app may be able to read or write to protected files", "component": "AppleMobileFileIntegrity", "impact": "A malicious app may be able to read or write to protected files", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01055, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24241", "url": "https://patchblox.com/security/cve/CVE-2025-24241", "title": "WindowServer: An app may be able to trick a user into copying sensitive data to the pasteboard", "component": "WindowServer", "impact": "An app may be able to trick a user into copying sensitive data to the pasteboard", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.01055, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31194", "url": "https://patchblox.com/security/cve/CVE-2025-31194", "title": "Shortcuts: A Shortcut may run with admin privileges without authentication", "component": "Shortcuts", "impact": "A Shortcut may run with admin privileges without authentication", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.0103, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30424", "url": "https://patchblox.com/security/cve/CVE-2025-30424", "title": "Photos Storage: Deleting a conversation in Messages may expose user contact information in system logging", "component": "Photos Storage", "impact": "Deleting a conversation in Messages may expose user contact information in system logging", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.0102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30448", "url": "https://patchblox.com/security/cve/CVE-2025-30448", "title": "iCloud Document Sharing: An attacker may be able to turn on sharing of an iCloud folder without authentication", "component": "iCloud Document Sharing", "impact": "An attacker may be able to turn on sharing of an iCloud folder without authentication", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.1, "epss": 0.01016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24246", "url": "https://patchblox.com/security/cve/CVE-2025-24246", "title": "OpenSSH: An app may be able to access user-sensitive data", "component": "OpenSSH", "impact": "An app may be able to access user-sensitive data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00968, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24247", "url": "https://patchblox.com/security/cve/CVE-2025-24247", "title": "WindowServer: An attacker may be able to cause unexpected app termination", "component": "WindowServer", "impact": "An attacker may be able to cause unexpected app termination", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00968, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24250", "url": "https://patchblox.com/security/cve/CVE-2025-24250", "title": "Security: A malicious app acting as a HTTPS proxy could get access to sensitive user data", "component": "Security", "impact": "A malicious app acting as a HTTPS proxy could get access to sensitive user data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00968, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24253", "url": "https://patchblox.com/security/cve/CVE-2025-24253", "title": "StorageKit: An app may be able to access protected user data", "component": "StorageKit", "impact": "An app may be able to access protected user data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00968, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24265", "url": "https://patchblox.com/security/cve/CVE-2025-24265", "title": "Xsan: An app may be able to cause unexpected system termination", "component": "Xsan", "impact": "An app may be able to cause unexpected system termination", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00968, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24172", "url": "https://patchblox.com/security/cve/CVE-2025-24172", "title": "Mail: \u0022Block All Remote Content\u0022 may not apply for all mail previews", "component": "Mail", "impact": "\u0022Block All Remote Content\u0022 may not apply for all mail previews", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00944, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24195", "url": "https://patchblox.com/security/cve/CVE-2025-24195", "title": "Libinfo: A user may be able to elevate privileges", "component": "Libinfo", "impact": "A user may be able to elevate privileges", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00944, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24167", "url": "https://patchblox.com/security/cve/CVE-2025-24167", "title": "Safari: A download\u0027s origin may be incorrectly associated", "component": "Safari", "impact": "A download\u0027s origin may be incorrectly associated", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00937, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24264", "url": "https://patchblox.com/security/cve/CVE-2025-24264", "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash", "component": "WebKit", "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00928, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24260", "url": "https://patchblox.com/security/cve/CVE-2025-24260", "title": "smbx: An attacker in a privileged position may be able to perform a denial-of-service", "component": "smbx", "impact": "An attacker in a privileged position may be able to perform a denial-of-service", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00902, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24249", "url": "https://patchblox.com/security/cve/CVE-2025-24249", "title": "Installer: An app may be able to check the existence of an arbitrary path on the file system", "component": "Installer", "impact": "An app may be able to check the existence of an arbitrary path on the file system", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00895, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30462", "url": "https://patchblox.com/security/cve/CVE-2025-30462", "title": "dyld: Apps that appear to use App Sandbox may be able to launch without restrictions", "component": "dyld", "impact": "Apps that appear to use App Sandbox may be able to launch without restrictions", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00893, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-43184", "url": "https://patchblox.com/security/cve/CVE-2025-43184", "title": "Shortcuts: A shortcut may be able to bypass sensitive Shortcuts app settings", "component": "Shortcuts", "impact": "A shortcut may be able to bypass sensitive Shortcuts app settings", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00818, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24093", "url": "https://patchblox.com/security/cve/CVE-2025-24093", "title": "Sandbox: An app may be able to access removable volumes without user consent", "component": "Sandbox", "impact": "An app may be able to access removable volumes without user consent", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00805, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24269", "url": "https://patchblox.com/security/cve/CVE-2025-24269", "title": "SMB: An app may be able to cause unexpected system termination", "component": "SMB", "impact": "An app may be able to cause unexpected system termination", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00805, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24259", "url": "https://patchblox.com/security/cve/CVE-2025-24259", "title": "Parental Controls: An app may be able to retrieve Safari bookmarks without an entitlement check", "component": "Parental Controls", "impact": "An app may be able to retrieve Safari bookmarks without an entitlement check", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00786, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30444", "url": "https://patchblox.com/security/cve/CVE-2025-30444", "title": "SMB: Mounting a maliciously crafted SMB network share may lead to system termination", "component": "SMB", "impact": "Mounting a maliciously crafted SMB network share may lead to system termination", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00774, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30458", "url": "https://patchblox.com/security/cve/CVE-2025-30458", "title": "SceneKit: An app may be able to read files outside of its sandbox", "component": "SceneKit", "impact": "An app may be able to read files outside of its sandbox", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00762, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30461", "url": "https://patchblox.com/security/cve/CVE-2025-30461", "title": "Foundation: An app may be able to access protected user data", "component": "Foundation", "impact": "An app may be able to access protected user data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00676, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24245", "url": "https://patchblox.com/security/cve/CVE-2025-24245", "title": "Authentication Services: A malicious app may be able to access a user\u0027s saved passwords", "component": "Authentication Services", "impact": "A malicious app may be able to access a user\u0027s saved passwords", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00664, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24263", "url": "https://patchblox.com/security/cve/CVE-2025-24263", "title": "StickerKit: An app may be able to observe unprotected user data", "component": "StickerKit", "impact": "An app may be able to observe unprotected user data", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00509, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31263", "url": "https://patchblox.com/security/cve/CVE-2025-31263", "title": "IOMobileFrameBuffer: An app may be able to corrupt coprocessor memory", "component": "IOMobileFrameBuffer", "impact": "An app may be able to corrupt coprocessor memory", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.1, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30466", "url": "https://patchblox.com/security/cve/CVE-2025-30466", "title": "Safari: A website may be able to bypass Same Origin Policy", "component": "Safari", "impact": "A website may be able to bypass Same Origin Policy", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30471", "url": "https://patchblox.com/security/cve/CVE-2025-30471", "title": "Security: A remote user may be able to cause a denial-of-service", "component": "Security", "impact": "A remote user may be able to cause a denial-of-service", "priority": "High", "severity": "HIGH", "cvss": 7.5, "epss": 0.015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24252", "url": "https://patchblox.com/security/cve/CVE-2025-24252", "title": "AirPlay: An attacker on the local network may be able to corrupt process memory", "component": "AirPlay", "impact": "An attacker on the local network may be able to corrupt process memory", "priority": "High", "severity": "HIGH", "cvss": 8.8, "epss": 0.01309, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-56171", "url": "https://patchblox.com/security/cve/CVE-2024-56171", "title": "libxml2: Parsing a file may lead to an unexpected app termination", "component": "libxml2", "impact": "Parsing a file may lead to an unexpected app termination", "priority": "High", "severity": "HIGH", "cvss": 9.8, "epss": 0.01178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-27113", "url": "https://patchblox.com/security/cve/CVE-2025-27113", "title": "libxml2: Parsing a file may lead to an unexpected app termination", "component": "libxml2", "impact": "Parsing a file may lead to an unexpected app termination", "priority": "High", "severity": "LOW", "cvss": 7.5, "epss": 0.01053, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24180", "url": "https://patchblox.com/security/cve/CVE-2025-24180", "title": "Authentication Services: A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix", "component": "Authentication Services", "impact": "A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix", "priority": "High", "severity": "HIGH", "cvss": 8.1, "epss": 0.0104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30456", "url": "https://patchblox.com/security/cve/CVE-2025-30456", "title": "DiskArbitration: An app may be able to gain root privileges", "component": "DiskArbitration", "impact": "An app may be able to gain root privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00998, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24196", "url": "https://patchblox.com/security/cve/CVE-2025-24196", "title": "Kernel: An attacker with user privileges may be able to read kernel memory", "component": "Kernel", "impact": "An attacker with user privileges may be able to read kernel memory", "priority": "High", "severity": "HIGH", "cvss": 8.8, "epss": 0.00931, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24209", "url": "https://patchblox.com/security/cve/CVE-2025-24209", "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash", "component": "WebKit", "impact": "Processing maliciously crafted web content may lead to an unexpected process crash", "priority": "High", "severity": "HIGH", "cvss": 8.8, "epss": 0.00903, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30427", "url": "https://patchblox.com/security/cve/CVE-2025-30427", "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash", "component": "WebKit", "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash", "priority": "High", "severity": "MEDIUM", "cvss": 8.8, "epss": 0.00833, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24254", "url": "https://patchblox.com/security/cve/CVE-2025-24254", "title": "Software Update: A user may be able to elevate privileges", "component": "Software Update", "impact": "A user may be able to elevate privileges", "priority": "High", "severity": "HIGH", "cvss": 8.8, "epss": 0.00812, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24229", "url": "https://patchblox.com/security/cve/CVE-2025-24229", "title": "Installer: A sandboxed app may be able to access sensitive user data", "component": "Installer", "impact": "A sandboxed app may be able to access sensitive user data", "priority": "High", "severity": "HIGH", "cvss": 7.4, "epss": 0.00794, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30460", "url": "https://patchblox.com/security/cve/CVE-2025-30460", "title": "Automator: An app may be able to access protected user data", "component": "Automator", "impact": "An app may be able to access protected user data", "priority": "High", "severity": "HIGH", "cvss": 7.4, "epss": 0.00771, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-48958", "url": "https://patchblox.com/security/cve/CVE-2024-48958", "title": "libarchive: An input validation issue was addressed", "component": "libarchive", "impact": "An input validation issue was addressed", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30437", "url": "https://patchblox.com/security/cve/CVE-2025-30437", "title": "IOMobileFrameBuffer: An app may be able to corrupt coprocessor memory", "component": "IOMobileFrameBuffer", "impact": "An app may be able to corrupt coprocessor memory", "priority": "High", "severity": "HIGH", "cvss": 7.4, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24243", "url": "https://patchblox.com/security/cve/CVE-2025-24243", "title": "Audio: Processing a maliciously crafted file may lead to arbitrary code execution", "component": "Audio", "impact": "Processing a maliciously crafted file may lead to arbitrary code execution", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00521, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24206", "url": "https://patchblox.com/security/cve/CVE-2025-24206", "title": "AirPlay: An attacker on the local network may be able to bypass authentication policy", "component": "AirPlay", "impact": "An attacker on the local network may be able to bypass authentication policy", "priority": "High", "severity": "HIGH", "cvss": 7.7, "epss": 0.00362, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24228", "url": "https://patchblox.com/security/cve/CVE-2025-24228", "title": "SMB: An app may be able to execute arbitrary code with kernel privileges", "component": "SMB", "impact": "An app may be able to execute arbitrary code with kernel privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00334, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24173", "url": "https://patchblox.com/security/cve/CVE-2025-24173", "title": "Power Services: An app may be able to break out of its sandbox", "component": "Power Services", "impact": "An app may be able to break out of its sandbox", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.0033, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24257", "url": "https://patchblox.com/security/cve/CVE-2025-24257", "title": "IOGPUFamily: An app may be able to cause unexpected system termination or write kernel memory", "component": "IOGPUFamily", "impact": "An app may be able to cause unexpected system termination or write kernel memory", "priority": "High", "severity": "HIGH", "cvss": 7.1, "epss": 0.00309, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30464", "url": "https://patchblox.com/security/cve/CVE-2025-30464", "title": "GPU Drivers: An app may be able to cause unexpected system termination or corrupt kernel memory", "component": "GPU Drivers", "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.0029, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24255", "url": "https://patchblox.com/security/cve/CVE-2025-24255", "title": "Disk Images: An app may be able to break out of its sandbox", "component": "Disk Images", "impact": "An app may be able to break out of its sandbox", "priority": "High", "severity": "HIGH", "cvss": 8.4, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24234", "url": "https://patchblox.com/security/cve/CVE-2025-24234", "title": "AccountPolicy: A malicious app may be able to gain root privileges", "component": "AccountPolicy", "impact": "A malicious app may be able to gain root privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24277", "url": "https://patchblox.com/security/cve/CVE-2025-24277", "title": "Crash Reporter: An app may be able to gain root privileges", "component": "Crash Reporter", "impact": "An app may be able to gain root privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24170", "url": "https://patchblox.com/security/cve/CVE-2025-24170", "title": "CoreServices: An app may be able to gain root privileges", "component": "CoreServices", "impact": "An app may be able to gain root privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00264, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31184", "url": "https://patchblox.com/security/cve/CVE-2025-31184", "title": "Web Extensions: An app may gain unauthorized access to Local Network", "component": "Web Extensions", "impact": "An app may gain unauthorized access to Local Network", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30449", "url": "https://patchblox.com/security/cve/CVE-2025-30449", "title": "StorageKit: An app may be able to gain root privileges", "component": "StorageKit", "impact": "An app may be able to gain root privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30442", "url": "https://patchblox.com/security/cve/CVE-2025-30442", "title": "SoftwareUpdate: An app may be able to gain elevated privileges", "component": "Software Update", "impact": "An app may be able to gain elevated privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24267", "url": "https://patchblox.com/security/cve/CVE-2025-24267", "title": "DiskArbitration: An app may be able to gain root privileges", "component": "DiskArbitration", "impact": "An app may be able to gain root privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00226, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31188", "url": "https://patchblox.com/security/cve/CVE-2025-31188", "title": "StorageKit: An app may be able to bypass Privacy preferences", "component": "StorageKit", "impact": "An app may be able to bypass Privacy preferences", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30453", "url": "https://patchblox.com/security/cve/CVE-2025-30453", "title": "DiskArbitration: A malicious app may be able to gain root privileges", "component": "DiskArbitration", "impact": "A malicious app may be able to gain root privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31189", "url": "https://patchblox.com/security/cve/CVE-2025-31189", "title": "Disk Images: An app may be able to break out of its sandbox", "component": "Disk Images", "impact": "An app may be able to break out of its sandbox", "priority": "High", "severity": "HIGH", "cvss": 8.2, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24284", "url": "https://patchblox.com/security/cve/CVE-2025-24284", "title": "quarantine: An app may be able to break out of its sandbox", "component": "quarantine", "impact": "An app may be able to break out of its sandbox", "priority": "High", "severity": "HIGH", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31272", "url": "https://patchblox.com/security/cve/CVE-2025-31272", "title": "AppleMobileFileIntegrity: An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges", "component": "AppleMobileFileIntegrity", "impact": "An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges", "priority": "High", "severity": "HIGH", "cvss": 7.8, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-27043", "url": "https://patchblox.com/security/cve/CVE-2023-27043", "title": "Python 3.10 and 8 others: Improper Input Validation", "component": "Python", "impact": "A remote attacker may be able to bypass sender policy checks and deliver malicious content via email", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.3, "epss": 0.02527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-9681", "url": "https://patchblox.com/security/cve/CVE-2024-9681", "title": "curl: An input validation issue was addressed", "component": "curl", "impact": "An input validation issue was addressed", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.01987, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30446", "url": "https://patchblox.com/security/cve/CVE-2025-30446", "title": "PackageKit: A malicious app with root privileges may be able to modify the contents of system files", "component": "PackageKit", "impact": "A malicious app with root privileges may be able to modify the contents of system files", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.00923, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30425", "url": "https://patchblox.com/security/cve/CVE-2025-30425", "title": "WebKit: A malicious website may be able to track users in Safari private browsing mode", "component": "WebKit", "impact": "A malicious website may be able to track users in Safari private browsing mode", "priority": "Routine", "severity": "MEDIUM", "cvss": 4.3, "epss": 0.0081, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24113", "url": "https://patchblox.com/security/cve/CVE-2025-24113", "title": "Safari: Visiting a malicious website may lead to user interface spoofing", "component": "Safari", "impact": "Visiting a malicious website may lead to user interface spoofing", "priority": "Routine", "severity": "MEDIUM", "cvss": 4.3, "epss": 0.00786, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24192", "url": "https://patchblox.com/security/cve/CVE-2025-24192", "title": "Web Extensions: Visiting a website may leak sensitive data", "component": "Web Extensions", "impact": "Visiting a website may leak sensitive data", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.00777, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24194", "url": "https://patchblox.com/security/cve/CVE-2025-24194", "title": "libnetcore: Processing maliciously crafted web content may result in the disclosure of process memory", "component": "libnetcore", "impact": "Processing maliciously crafted web content may result in the disclosure of process memory", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24157", "url": "https://patchblox.com/security/cve/CVE-2025-24157", "title": "Xsan: An app may be able to cause unexpected system termination or corrupt kernel memory", "component": "Xsan", "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.6, "epss": 0.00726, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24272", "url": "https://patchblox.com/security/cve/CVE-2025-24272", "title": "AppleMobileFileIntegrity: An app may be able to modify protected parts of the file system", "component": "AppleMobileFileIntegrity", "impact": "An app may be able to modify protected parts of the file system", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.8, "epss": 0.00659, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24203", "url": "https://patchblox.com/security/cve/CVE-2025-24203", "title": "Kernel: An app may be able to modify protected parts of the file system", "component": "Kernel", "impact": "An app may be able to modify protected parts of the file system", "priority": "Routine", "severity": "MEDIUM", "cvss": 5, "epss": 0.00634, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31192", "url": "https://patchblox.com/security/cve/CVE-2025-31192", "title": "Safari: A website may be able to access sensor information without user consent", "component": "Safari", "impact": "A website may be able to access sensor information without user consent", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.7, "epss": 0.00592, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24239", "url": "https://patchblox.com/security/cve/CVE-2025-24239", "title": "AppleMobileFileIntegrity: An app may be able to access protected user data", "component": "AppleMobileFileIntegrity", "impact": "An app may be able to access protected user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.0055, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24279", "url": "https://patchblox.com/security/cve/CVE-2025-24279", "title": "Voice Control: An app may be able to access contacts", "component": "Voice Control", "impact": "An app may be able to access contacts", "priority": "Routine", "severity": "MEDIUM", "cvss": 4.3, "epss": 0.00545, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30467", "url": "https://patchblox.com/security/cve/CVE-2025-30467", "title": "Safari: Visiting a malicious website may lead to address bar spoofing", "component": "Safari", "impact": "Visiting a malicious website may lead to address bar spoofing", "priority": "Routine", "severity": "MEDIUM", "cvss": 4.3, "epss": 0.00544, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31199", "url": "https://patchblox.com/security/cve/CVE-2025-31199", "title": "Spotlight: An app may be able to access sensitive user data", "component": "Logging", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00519, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24271", "url": "https://patchblox.com/security/cve/CVE-2025-24271", "title": "AirPlay: An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing", "component": "AirPlay", "impact": "An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.4, "epss": 0.00508, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24235", "url": "https://patchblox.com/security/cve/CVE-2025-24235", "title": "Kerberos Helper: A remote attacker may be able to cause unexpected app termination or heap corruption", "component": "Kerberos Helper", "impact": "A remote attacker may be able to cause unexpected app termination or heap corruption", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00497, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31191", "url": "https://patchblox.com/security/cve/CVE-2025-31191", "title": "CoreServices: An app may be able to access sensitive user data", "component": "CoreServices", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24198", "url": "https://patchblox.com/security/cve/CVE-2025-24198", "title": "Siri: An attacker with physical access may be able to use Siri to access sensitive user data", "component": "Siri", "impact": "An attacker with physical access may be able to use Siri to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.6, "epss": 0.00445, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24163", "url": "https://patchblox.com/security/cve/CVE-2025-24163", "title": "CoreAudio: Parsing a file may lead to an unexpected app termination", "component": "CoreAudio", "impact": "Parsing a file may lead to an unexpected app termination", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24248", "url": "https://patchblox.com/security/cve/CVE-2025-24248", "title": "Siri: An app may be able to enumerate devices that have signed into the user\u0027s Apple Account", "component": "Siri", "impact": "An app may be able to enumerate devices that have signed into the user\u0027s Apple Account", "priority": "Routine", "severity": "MEDIUM", "cvss": 5, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30439", "url": "https://patchblox.com/security/cve/CVE-2025-30439", "title": "Focus: An attacker with physical access to a locked device may be able to view sensitive user information", "component": "Focus", "impact": "An attacker with physical access to a locked device may be able to view sensitive user information", "priority": "Routine", "severity": "MEDIUM", "cvss": 4.6, "epss": 0.00411, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24251", "url": "https://patchblox.com/security/cve/CVE-2025-24251", "title": "AirPlay: An attacker on the local network may cause an unexpected app termination", "component": "AirPlay", "impact": "An attacker on the local network may cause an unexpected app termination", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30445", "url": "https://patchblox.com/security/cve/CVE-2025-30445", "title": "AirPlay: An attacker on the local network may cause an unexpected app termination", "component": "AirPlay", "impact": "An attacker on the local network may cause an unexpected app termination", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.00378, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31203", "url": "https://patchblox.com/security/cve/CVE-2025-31203", "title": "CoreUtils: An attacker on the local network may be able to cause a denial-of-service", "component": "CoreUtils", "impact": "An attacker on the local network may be able to cause a denial-of-service", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.5, "epss": 0.00378, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24097", "url": "https://patchblox.com/security/cve/CVE-2025-24097", "title": "AirDrop: An app may be able to read arbitrary file metadata", "component": "AirDrop", "impact": "An app may be able to read arbitrary file metadata", "priority": "Routine", "severity": "MEDIUM", "cvss": 5, "epss": 0.00369, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30470", "url": "https://patchblox.com/security/cve/CVE-2025-30470", "title": "Maps: An app may be able to read sensitive location information", "component": "Maps", "impact": "An app may be able to read sensitive location information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00343, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24210", "url": "https://patchblox.com/security/cve/CVE-2025-24210", "title": "ImageIO: Parsing an image may lead to disclosure of user information", "component": "ImageIO", "impact": "Parsing an image may lead to disclosure of user information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24270", "url": "https://patchblox.com/security/cve/CVE-2025-24270", "title": "AirPlay: An attacker on the local network may be able to leak sensitive user information", "component": "AirPlay", "impact": "An attacker on the local network may be able to leak sensitive user information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.7, "epss": 0.00327, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24244", "url": "https://patchblox.com/security/cve/CVE-2025-24244", "title": "Audio: Processing a maliciously crafted font may result in the disclosure of process memory", "component": "Audio", "impact": "Processing a maliciously crafted font may result in the disclosure of process memory", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30447", "url": "https://patchblox.com/security/cve/CVE-2025-30447", "title": "Foundation: An app may be able to access sensitive user data", "component": "Foundation", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00315, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24212", "url": "https://patchblox.com/security/cve/CVE-2025-24212", "title": "Calendar: An app may be able to break out of its sandbox", "component": "Calendar", "impact": "An app may be able to break out of its sandbox", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.3, "epss": 0.00311, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30429", "url": "https://patchblox.com/security/cve/CVE-2025-30429", "title": "Calendar: An app may be able to break out of its sandbox", "component": "Calendar", "impact": "An app may be able to break out of its sandbox", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.3, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30454", "url": "https://patchblox.com/security/cve/CVE-2025-30454", "title": "CoreMedia Playback: A malicious app may be able to access private information", "component": "CoreMedia Playback", "impact": "A malicious app may be able to access private information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24164", "url": "https://patchblox.com/security/cve/CVE-2025-24164", "title": "PackageKit: An app may be able to modify protected parts of the file system", "component": "PackageKit", "impact": "An app may be able to modify protected parts of the file system", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24182", "url": "https://patchblox.com/security/cve/CVE-2025-24182", "title": "CoreText: Processing a maliciously crafted font may result in the disclosure of process memory", "component": "CoreText", "impact": "Processing a maliciously crafted font may result in the disclosure of process memory", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24242", "url": "https://patchblox.com/security/cve/CVE-2025-24242", "title": "System Settings: An app with root privileges may be able to access private information", "component": "System Settings", "impact": "An app with root privileges may be able to access private information", "priority": "Routine", "severity": "MEDIUM", "cvss": 4.4, "epss": 0.00293, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30438", "url": "https://patchblox.com/security/cve/CVE-2025-30438", "title": "Share Sheet: A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started", "component": "Share Sheet", "impact": "A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00291, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24191", "url": "https://patchblox.com/security/cve/CVE-2025-24191", "title": "RPAC: An app may be able to modify protected parts of the file system", "component": "RPAC", "impact": "An app may be able to modify protected parts of the file system", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00289, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24205", "url": "https://patchblox.com/security/cve/CVE-2025-24205", "title": "Siri: An app may be able to access user-sensitive data", "component": "Siri", "impact": "An app may be able to access user-sensitive data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24214", "url": "https://patchblox.com/security/cve/CVE-2025-24214", "title": "Siri: An app may be able to access sensitive user data", "component": "Siri", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24217", "url": "https://patchblox.com/security/cve/CVE-2025-24217", "title": "Siri: An app may be able to access sensitive user data", "component": "Siri", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00285, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24278", "url": "https://patchblox.com/security/cve/CVE-2025-24278", "title": "System Settings: An app may be able to access protected user data", "component": "System Settings", "impact": "An app may be able to access protected user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00285, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30443", "url": "https://patchblox.com/security/cve/CVE-2025-30443", "title": "Found in Apps: An app may be able to access user-sensitive data", "component": "AppleMobileFileIntegrity", "impact": "An app may be able to access user-sensitive data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24283", "url": "https://patchblox.com/security/cve/CVE-2025-24283", "title": "Focus: An app may be able to access sensitive user data", "component": "Focus", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.0028, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24236", "url": "https://patchblox.com/security/cve/CVE-2025-24236", "title": "CoreMedia: An app may be able to access sensitive user data", "component": "CoreMedia", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24199", "url": "https://patchblox.com/security/cve/CVE-2025-24199", "title": "Foundation: An app may be able to cause a denial-of-service", "component": "Foundation", "impact": "An app may be able to cause a denial-of-service", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00276, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30463", "url": "https://patchblox.com/security/cve/CVE-2025-30463", "title": "Handoff: An app may be able to access sensitive user data", "component": "Handoff", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24281", "url": "https://patchblox.com/security/cve/CVE-2025-24281", "title": "FeedbackLogger: An app may be able to access sensitive user data", "component": "FeedbackLogger", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30450", "url": "https://patchblox.com/security/cve/CVE-2025-30450", "title": "manpages: An app may be able to access sensitive user data", "component": "manpages", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24202", "url": "https://patchblox.com/security/cve/CVE-2025-24202", "title": "Accessibility: An app may be able to access sensitive user data", "component": "Accessibility", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00265, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24215", "url": "https://patchblox.com/security/cve/CVE-2025-24215", "title": "CloudKit: A malicious app may be able to access private information", "component": "CloudKit", "impact": "A malicious app may be able to access private information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00265, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30435", "url": "https://patchblox.com/security/cve/CVE-2025-30435", "title": "Siri: A sandboxed app may be able to access sensitive user data in system logs", "component": "Siri", "impact": "A sandboxed app may be able to access sensitive user data in system logs", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00265, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24282", "url": "https://patchblox.com/security/cve/CVE-2025-24282", "title": "Software Update: An app may be able to modify protected parts of the file system", "component": "Software Update", "impact": "An app may be able to modify protected parts of the file system", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24262", "url": "https://patchblox.com/security/cve/CVE-2025-24262", "title": "Notes: A sandboxed app may be able to access sensitive user data in system logs", "component": "Notes", "impact": "A sandboxed app may be able to access sensitive user data in system logs", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24280", "url": "https://patchblox.com/security/cve/CVE-2025-24280", "title": "Shortcuts: An app may be able to access user-sensitive data", "component": "Shortcuts", "impact": "An app may be able to access user-sensitive data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30455", "url": "https://patchblox.com/security/cve/CVE-2025-30455", "title": "Dock: A malicious app may be able to access private information", "component": "Dock", "impact": "A malicious app may be able to access private information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31187", "url": "https://patchblox.com/security/cve/CVE-2025-31187", "title": "Dock: An app may be able to modify protected parts of the file system", "component": "Dock", "impact": "An app may be able to modify protected parts of the file system", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24261", "url": "https://patchblox.com/security/cve/CVE-2025-24261", "title": "PackageKit: An app may be able to modify protected parts of the file system", "component": "PackageKit", "impact": "An app may be able to modify protected parts of the file system", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24276", "url": "https://patchblox.com/security/cve/CVE-2025-24276", "title": "App Store: A malicious app may be able to access private information", "component": "App Store", "impact": "A malicious app may be able to access private information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24218", "url": "https://patchblox.com/security/cve/CVE-2025-24218", "title": "Summarization Services: An app may be able to access information about a user\u0027s contacts", "component": "Summarization Services", "impact": "An app may be able to access information about a user\u0027s contacts", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31196", "url": "https://patchblox.com/security/cve/CVE-2025-31196", "title": "CoreGraphics: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents", "component": "CoreGraphics", "impact": "Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30451", "url": "https://patchblox.com/security/cve/CVE-2025-30451", "title": "FaceTime: An app may be able to access sensitive user data", "component": "FaceTime", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00243, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31198", "url": "https://patchblox.com/security/cve/CVE-2025-31198", "title": "zip: A path handling issue was addressed with improved validation", "component": "zip", "impact": "A path handling issue was addressed with improved validation", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-46308", "url": "https://patchblox.com/security/cve/CVE-2025-46308", "title": "MediaRemote: An app may be able to leak sensitive user information", "component": "MediaRemote", "impact": "An app may be able to leak sensitive user information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.3, "epss": 0.0023, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24240", "url": "https://patchblox.com/security/cve/CVE-2025-24240", "title": "StorageKit: An app may be able to access user-sensitive data", "component": "StorageKit", "impact": "An app may be able to access user-sensitive data", "priority": "Routine", "severity": "MEDIUM", "cvss": 4.7, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31231", "url": "https://patchblox.com/security/cve/CVE-2025-31231", "title": "libnetcore: An app may be able to read sensitive location information", "component": "libnetcore", "impact": "An app may be able to read sensitive location information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31202", "url": "https://patchblox.com/security/cve/CVE-2025-31202", "title": "AirPlay: An attacker on the local network may be able to cause a denial-of-service", "component": "AirPlay", "impact": "An attacker on the local network may be able to cause a denial-of-service", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31261", "url": "https://patchblox.com/security/cve/CVE-2025-31261", "title": "StorageKit: An app may be able to access protected user data", "component": "StorageKit", "impact": "An app may be able to access protected user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-31195", "url": "https://patchblox.com/security/cve/CVE-2025-31195", "title": "TCC: An app may be able to break out of its sandbox", "component": "TCC", "impact": "An app may be able to break out of its sandbox", "priority": "Routine", "severity": "MEDIUM", "cvss": 6.3, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24148", "url": "https://patchblox.com/security/cve/CVE-2025-24148", "title": "LaunchServices: A malicious JAR file may bypass Gatekeeper checks", "component": "LaunchServices", "impact": "A malicious JAR file may bypass Gatekeeper checks", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-43205", "url": "https://patchblox.com/security/cve/CVE-2025-43205", "title": "Audio: An app may be able to bypass ASLR", "component": "Audio", "impact": "An app may be able to bypass ASLR", "priority": "Routine", "severity": "MEDIUM", "cvss": 4, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24268", "url": "https://patchblox.com/security/cve/CVE-2025-24268", "title": "Setup Assistant: An app may be able to access sensitive user data", "component": "Setup Assistant", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30431", "url": "https://patchblox.com/security/cve/CVE-2025-30431", "title": "Game Center: A malicious app may be able to access private information", "component": "Game Center", "impact": "A malicious app may be able to access private information", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-30459", "url": "https://patchblox.com/security/cve/CVE-2025-30459", "title": "RemoteViewServices: An app may be able to access sensitive user data", "component": "RemoteViewServices", "impact": "An app may be able to access sensitive user data", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-24165", "url": "https://patchblox.com/security/cve/CVE-2025-24165", "title": "SMB: An app may be able to cause unexpected system termination", "component": "SMB", "impact": "An app may be able to cause unexpected system termination", "priority": "Routine", "severity": "MEDIUM", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-07T18:46:35Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }