{
  "fix": "Sonoma 14.7.5",
  "url": "https://patchblox.com/security/fix/macos/sonoma-14.7.5",
  "summary": "Sonoma 14.7.5, released March 31, 2025, fixes 109 CVEs in Sonoma. One of them is being exploited (CVE-2025-24085); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sonoma 14.7.5",
  "released": "2025-03-31T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-24085, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 109,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.17401,
  "maxCvss": 10,
  "vendorAdvisory": "https://support.apple.com/en-us/122374",
  "appliesTo": [
    {
      "product": "Sonoma",
      "productUrl": "https://patchblox.com/security/product/macos/sonoma",
      "fixedVersion": "14.7.5",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-24085",
      "url": "https://patchblox.com/security/cve/CVE-2025-24085",
      "title": "CoreMedia: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.",
      "component": "CoreMedia",
      "impact": "A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.",
      "priority": "Patch now",
      "severity": "CRITICAL",
      "cvss": 10,
      "epss": 0.17401,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24190",
      "url": "https://patchblox.com/security/cve/CVE-2025-24190",
      "title": "CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24211",
      "url": "https://patchblox.com/security/cve/CVE-2025-24211",
      "title": "CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24230",
      "url": "https://patchblox.com/security/cve/CVE-2025-24230",
      "title": "CoreAudio: Playing a malicious audio file may lead to an unexpected app termination",
      "component": "CoreAudio",
      "impact": "Playing a malicious audio file may lead to an unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24237",
      "url": "https://patchblox.com/security/cve/CVE-2025-24237",
      "title": "BiometricKit: An app may be able to cause unexpected system termination",
      "component": "BiometricKit",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01637,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24178",
      "url": "https://patchblox.com/security/cve/CVE-2025-24178",
      "title": "libxpc: An app may be able to break out of its sandbox",
      "component": "libxpc",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01604,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24126",
      "url": "https://patchblox.com/security/cve/CVE-2025-24126",
      "title": "AirPlay: An attacker on the local network may be able to corrupt process memory",
      "component": "AirPlay",
      "impact": "An attacker on the local network may be able to corrupt process memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30433",
      "url": "https://patchblox.com/security/cve/CVE-2025-30433",
      "title": "Shortcuts: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31182",
      "url": "https://patchblox.com/security/cve/CVE-2025-31182",
      "title": "libxpc: An app may be able to delete files for which it does not have permission",
      "component": "libxpc",
      "impact": "An app may be able to delete files for which it does not have permission",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31183",
      "url": "https://patchblox.com/security/cve/CVE-2025-31183",
      "title": "Siri: An app may be able to access sensitive user data",
      "component": "Siri",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30457",
      "url": "https://patchblox.com/security/cve/CVE-2025-30457",
      "title": "SystemMigration: A malicious app may be able to create symlinks to protected regions of the disk",
      "component": "SystemMigration",
      "impact": "A malicious app may be able to create symlinks to protected regions of the disk",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24256",
      "url": "https://patchblox.com/security/cve/CVE-2025-24256",
      "title": "GPU Drivers: An app may be able to disclose kernel memory",
      "component": "GPU Drivers",
      "impact": "An app may be able to disclose kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24238",
      "url": "https://patchblox.com/security/cve/CVE-2025-24238",
      "title": "libxpc: An app may be able to gain elevated privileges",
      "component": "libxpc",
      "impact": "An app may be able to gain elevated privileges",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24232",
      "url": "https://patchblox.com/security/cve/CVE-2025-24232",
      "title": "NSDocument: A malicious app may be able to access arbitrary files",
      "component": "NSDocument",
      "impact": "A malicious app may be able to access arbitrary files",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30452",
      "url": "https://patchblox.com/security/cve/CVE-2025-30452",
      "title": "Sandbox: An input validation issue was addressed",
      "component": "Sandbox",
      "impact": "An input validation issue was addressed",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30465",
      "url": "https://patchblox.com/security/cve/CVE-2025-30465",
      "title": "Shortcuts: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to access files that are normally inaccessible to the Shortcuts app",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01073,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24266",
      "url": "https://patchblox.com/security/cve/CVE-2025-24266",
      "title": "Xsan: An app may be able to cause unexpected system termination",
      "component": "Xsan",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01069,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24181",
      "url": "https://patchblox.com/security/cve/CVE-2025-24181",
      "title": "Sandbox: An app may be able to access protected user data",
      "component": "Sandbox",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01055,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24207",
      "url": "https://patchblox.com/security/cve/CVE-2025-24207",
      "title": "Storage Management: An app may be able to enable iCloud storage features without user consent",
      "component": "Storage Management",
      "impact": "An app may be able to enable iCloud storage features without user consent",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01055,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24233",
      "url": "https://patchblox.com/security/cve/CVE-2025-24233",
      "title": "AppleMobileFileIntegrity: A malicious app may be able to read or write to protected files",
      "component": "AppleMobileFileIntegrity",
      "impact": "A malicious app may be able to read or write to protected files",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01055,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24241",
      "url": "https://patchblox.com/security/cve/CVE-2025-24241",
      "title": "WindowServer: An app may be able to trick a user into copying sensitive data to the pasteboard",
      "component": "WindowServer",
      "impact": "An app may be able to trick a user into copying sensitive data to the pasteboard",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01055,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31194",
      "url": "https://patchblox.com/security/cve/CVE-2025-31194",
      "title": "Shortcuts: A Shortcut may run with admin privileges without authentication",
      "component": "Shortcuts",
      "impact": "A Shortcut may run with admin privileges without authentication",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0103,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30424",
      "url": "https://patchblox.com/security/cve/CVE-2025-30424",
      "title": "Photos Storage: Deleting a conversation in Messages may expose user contact information in system logging",
      "component": "Photos Storage",
      "impact": "Deleting a conversation in Messages may expose user contact information in system logging",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24246",
      "url": "https://patchblox.com/security/cve/CVE-2025-24246",
      "title": "OpenSSH: An app may be able to access user-sensitive data",
      "component": "OpenSSH",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00968,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24247",
      "url": "https://patchblox.com/security/cve/CVE-2025-24247",
      "title": "WindowServer: An attacker may be able to cause unexpected app termination",
      "component": "WindowServer",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00968,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24250",
      "url": "https://patchblox.com/security/cve/CVE-2025-24250",
      "title": "Security: A malicious app acting as a HTTPS proxy could get access to sensitive user data",
      "component": "Security",
      "impact": "A malicious app acting as a HTTPS proxy could get access to sensitive user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00968,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24253",
      "url": "https://patchblox.com/security/cve/CVE-2025-24253",
      "title": "StorageKit: An app may be able to access protected user data",
      "component": "StorageKit",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00968,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24265",
      "url": "https://patchblox.com/security/cve/CVE-2025-24265",
      "title": "Xsan: An app may be able to cause unexpected system termination",
      "component": "Xsan",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00968,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24273",
      "url": "https://patchblox.com/security/cve/CVE-2025-24273",
      "title": "GPU Drivers: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "GPU Drivers",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00968,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24172",
      "url": "https://patchblox.com/security/cve/CVE-2025-24172",
      "title": "Mail: \u0022Block All Remote Content\u0022 may not apply for all mail previews",
      "component": "Mail",
      "impact": "\u0022Block All Remote Content\u0022 may not apply for all mail previews",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00944,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24195",
      "url": "https://patchblox.com/security/cve/CVE-2025-24195",
      "title": "Libinfo: A user may be able to elevate privileges",
      "component": "Libinfo",
      "impact": "A user may be able to elevate privileges",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00944,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24260",
      "url": "https://patchblox.com/security/cve/CVE-2025-24260",
      "title": "smbx: An attacker in a privileged position may be able to perform a denial-of-service",
      "component": "smbx",
      "impact": "An attacker in a privileged position may be able to perform a denial-of-service",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00902,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24249",
      "url": "https://patchblox.com/security/cve/CVE-2025-24249",
      "title": "Installer: An app may be able to check the existence of an arbitrary path on the file system",
      "component": "Installer",
      "impact": "An app may be able to check the existence of an arbitrary path on the file system",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00895,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30462",
      "url": "https://patchblox.com/security/cve/CVE-2025-30462",
      "title": "dyld: Apps that appear to use App Sandbox may be able to launch without restrictions",
      "component": "dyld",
      "impact": "Apps that appear to use App Sandbox may be able to launch without restrictions",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00893,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24259",
      "url": "https://patchblox.com/security/cve/CVE-2025-24259",
      "title": "Parental Controls: An app may be able to retrieve Safari bookmarks without an entitlement check",
      "component": "Parental Controls",
      "impact": "An app may be able to retrieve Safari bookmarks without an entitlement check",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00786,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30444",
      "url": "https://patchblox.com/security/cve/CVE-2025-30444",
      "title": "SMB: Mounting a maliciously crafted SMB network share may lead to system termination",
      "component": "SMB",
      "impact": "Mounting a maliciously crafted SMB network share may lead to system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00774,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30471",
      "url": "https://patchblox.com/security/cve/CVE-2025-30471",
      "title": "Security: A remote user may be able to cause a denial-of-service",
      "component": "Security",
      "impact": "A remote user may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24129",
      "url": "https://patchblox.com/security/cve/CVE-2025-24129",
      "title": "AirPlay: An attacker on the local network may cause an unexpected app termination",
      "component": "AirPlay",
      "impact": "An attacker on the local network may cause an unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24252",
      "url": "https://patchblox.com/security/cve/CVE-2025-24252",
      "title": "AirPlay: An attacker on the local network may be able to corrupt process memory",
      "component": "AirPlay",
      "impact": "An attacker on the local network may be able to corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.01309,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-56171",
      "url": "https://patchblox.com/security/cve/CVE-2024-56171",
      "title": "libxml2: Parsing a file may lead to an unexpected app termination",
      "component": "libxml2",
      "impact": "Parsing a file may lead to an unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 9.8,
      "epss": 0.01178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-27113",
      "url": "https://patchblox.com/security/cve/CVE-2025-27113",
      "title": "libxml2: Parsing a file may lead to an unexpected app termination",
      "component": "libxml2",
      "impact": "Parsing a file may lead to an unexpected app termination",
      "priority": "High",
      "severity": "LOW",
      "cvss": 7.5,
      "epss": 0.01053,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30456",
      "url": "https://patchblox.com/security/cve/CVE-2025-30456",
      "title": "DiskArbitration: An app may be able to gain root privileges",
      "component": "DiskArbitration",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00998,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24196",
      "url": "https://patchblox.com/security/cve/CVE-2025-24196",
      "title": "Kernel: An attacker with user privileges may be able to read kernel memory",
      "component": "Kernel",
      "impact": "An attacker with user privileges may be able to read kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00931,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24177",
      "url": "https://patchblox.com/security/cve/CVE-2025-24177",
      "title": "AirPlay: An attacker on the local network may be able to cause a denial-of-service",
      "component": "AirPlay",
      "impact": "An attacker on the local network may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00838,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24254",
      "url": "https://patchblox.com/security/cve/CVE-2025-24254",
      "title": "Software Update: A user may be able to elevate privileges",
      "component": "Software Update",
      "impact": "A user may be able to elevate privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00812,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24229",
      "url": "https://patchblox.com/security/cve/CVE-2025-24229",
      "title": "Installer: A sandboxed app may be able to access sensitive user data",
      "component": "Installer",
      "impact": "A sandboxed app may be able to access sensitive user data",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.4,
      "epss": 0.00794,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30460",
      "url": "https://patchblox.com/security/cve/CVE-2025-30460",
      "title": "Automator: An app may be able to access protected user data",
      "component": "Automator",
      "impact": "An app may be able to access protected user data",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.4,
      "epss": 0.00771,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54533",
      "url": "https://patchblox.com/security/cve/CVE-2024-54533",
      "title": "Spotlight: An app may be able to access sensitive user data",
      "component": "Spotlight",
      "impact": "An app may be able to access sensitive user data",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.00736,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24243",
      "url": "https://patchblox.com/security/cve/CVE-2025-24243",
      "title": "Audio: Processing a maliciously crafted file may lead to arbitrary code execution",
      "component": "Audio",
      "impact": "Processing a maliciously crafted file may lead to arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00521,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24206",
      "url": "https://patchblox.com/security/cve/CVE-2025-24206",
      "title": "AirPlay: An attacker on the local network may be able to bypass authentication policy",
      "component": "AirPlay",
      "impact": "An attacker on the local network may be able to bypass authentication policy",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.7,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24228",
      "url": "https://patchblox.com/security/cve/CVE-2025-24228",
      "title": "SMB: An app may be able to execute arbitrary code with kernel privileges",
      "component": "SMB",
      "impact": "An app may be able to execute arbitrary code with kernel privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00334,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24173",
      "url": "https://patchblox.com/security/cve/CVE-2025-24173",
      "title": "Power Services: An app may be able to break out of its sandbox",
      "component": "Power Services",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24255",
      "url": "https://patchblox.com/security/cve/CVE-2025-24255",
      "title": "Disk Images: An app may be able to break out of its sandbox",
      "component": "Disk Images",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24234",
      "url": "https://patchblox.com/security/cve/CVE-2025-24234",
      "title": "AccountPolicy: A malicious app may be able to gain root privileges",
      "component": "AccountPolicy",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24277",
      "url": "https://patchblox.com/security/cve/CVE-2025-24277",
      "title": "Crash Reporter: An app may be able to gain root privileges",
      "component": "Crash Reporter",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24170",
      "url": "https://patchblox.com/security/cve/CVE-2025-24170",
      "title": "CoreServices: An app may be able to gain root privileges",
      "component": "CoreServices",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30449",
      "url": "https://patchblox.com/security/cve/CVE-2025-30449",
      "title": "StorageKit: An app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24267",
      "url": "https://patchblox.com/security/cve/CVE-2025-24267",
      "title": "DiskArbitration: An app may be able to gain root privileges",
      "component": "DiskArbitration",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24107",
      "url": "https://patchblox.com/security/cve/CVE-2025-24107",
      "title": "Kernel: A malicious app may be able to gain root privileges",
      "component": "Kernel",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00221,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31188",
      "url": "https://patchblox.com/security/cve/CVE-2025-31188",
      "title": "StorageKit: An app may be able to bypass Privacy preferences",
      "component": "StorageKit",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31189",
      "url": "https://patchblox.com/security/cve/CVE-2025-31189",
      "title": "Disk Images: An app may be able to break out of its sandbox",
      "component": "Disk Images",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-9681",
      "url": "https://patchblox.com/security/cve/CVE-2024-9681",
      "title": "curl: An input validation issue was addressed",
      "component": "curl",
      "impact": "An input validation issue was addressed",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01987,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24131",
      "url": "https://patchblox.com/security/cve/CVE-2025-24131",
      "title": "AirPlay: An attacker on the local network may be able to cause a denial-of-service",
      "component": "AirPlay",
      "impact": "An attacker on the local network may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30446",
      "url": "https://patchblox.com/security/cve/CVE-2025-30446",
      "title": "PackageKit: A malicious app with root privileges may be able to modify the contents of system files",
      "component": "PackageKit",
      "impact": "A malicious app with root privileges may be able to modify the contents of system files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00923,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30432",
      "url": "https://patchblox.com/security/cve/CVE-2025-30432",
      "title": "Kernel: A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures",
      "component": "Kernel",
      "impact": "A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.4,
      "epss": 0.00846,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24157",
      "url": "https://patchblox.com/security/cve/CVE-2025-24157",
      "title": "Xsan: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Xsan",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.6,
      "epss": 0.00726,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24272",
      "url": "https://patchblox.com/security/cve/CVE-2025-24272",
      "title": "AppleMobileFileIntegrity: An app may be able to modify protected parts of the file system",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.8,
      "epss": 0.00659,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40864",
      "url": "https://patchblox.com/security/cve/CVE-2024-40864",
      "title": "Apple Account: An attacker in a privileged network position may be able to track a user\u0027s activity",
      "component": "Apple Account",
      "impact": "An attacker in a privileged network position may be able to track a user\u0027s activity",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.7,
      "epss": 0.00653,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24203",
      "url": "https://patchblox.com/security/cve/CVE-2025-24203",
      "title": "Kernel: An app may be able to modify protected parts of the file system",
      "component": "Kernel",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24279",
      "url": "https://patchblox.com/security/cve/CVE-2025-24279",
      "title": "Voice Control: An app may be able to access contacts",
      "component": "Voice Control",
      "impact": "An app may be able to access contacts",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.00545,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24271",
      "url": "https://patchblox.com/security/cve/CVE-2025-24271",
      "title": "AirPlay: An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing",
      "component": "AirPlay",
      "impact": "An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.4,
      "epss": 0.00508,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24235",
      "url": "https://patchblox.com/security/cve/CVE-2025-24235",
      "title": "Kerberos Helper: A remote attacker may be able to cause unexpected app termination or heap corruption",
      "component": "Kerberos Helper",
      "impact": "A remote attacker may be able to cause unexpected app termination or heap corruption",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00497,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31191",
      "url": "https://patchblox.com/security/cve/CVE-2025-31191",
      "title": "CoreServices: An app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24198",
      "url": "https://patchblox.com/security/cve/CVE-2025-24198",
      "title": "Siri: An attacker with physical access may be able to use Siri to access sensitive user data",
      "component": "Siri",
      "impact": "An attacker with physical access may be able to use Siri to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.6,
      "epss": 0.00445,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24251",
      "url": "https://patchblox.com/security/cve/CVE-2025-24251",
      "title": "AirPlay: An attacker on the local network may cause an unexpected app termination",
      "component": "AirPlay",
      "impact": "An attacker on the local network may cause an unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31203",
      "url": "https://patchblox.com/security/cve/CVE-2025-31203",
      "title": "CoreUtils: An attacker on the local network may be able to cause a denial-of-service",
      "component": "CoreUtils",
      "impact": "An attacker on the local network may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00378,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24097",
      "url": "https://patchblox.com/security/cve/CVE-2025-24097",
      "title": "AirDrop: An app may be able to read arbitrary file metadata",
      "component": "AirDrop",
      "impact": "An app may be able to read arbitrary file metadata",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5,
      "epss": 0.00369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30470",
      "url": "https://patchblox.com/security/cve/CVE-2025-30470",
      "title": "Maps: An app may be able to read sensitive location information",
      "component": "Maps",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00343,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24210",
      "url": "https://patchblox.com/security/cve/CVE-2025-24210",
      "title": "ImageIO: Parsing an image may lead to disclosure of user information",
      "component": "ImageIO",
      "impact": "Parsing an image may lead to disclosure of user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24270",
      "url": "https://patchblox.com/security/cve/CVE-2025-24270",
      "title": "AirPlay: An attacker on the local network may be able to leak sensitive user information",
      "component": "AirPlay",
      "impact": "An attacker on the local network may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.7,
      "epss": 0.00327,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24244",
      "url": "https://patchblox.com/security/cve/CVE-2025-24244",
      "title": "Audio: Processing a maliciously crafted font may result in the disclosure of process memory",
      "component": "Audio",
      "impact": "Processing a maliciously crafted font may result in the disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30447",
      "url": "https://patchblox.com/security/cve/CVE-2025-30447",
      "title": "Foundation: An app may be able to access sensitive user data",
      "component": "Foundation",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00315,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24212",
      "url": "https://patchblox.com/security/cve/CVE-2025-24212",
      "title": "Calendar: An app may be able to break out of its sandbox",
      "component": "Calendar",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30429",
      "url": "https://patchblox.com/security/cve/CVE-2025-30429",
      "title": "Calendar: An app may be able to break out of its sandbox",
      "component": "Calendar",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.00303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30454",
      "url": "https://patchblox.com/security/cve/CVE-2025-30454",
      "title": "CoreMedia Playback: A malicious app may be able to access private information",
      "component": "CoreMedia Playback",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24164",
      "url": "https://patchblox.com/security/cve/CVE-2025-24164",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00294,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30438",
      "url": "https://patchblox.com/security/cve/CVE-2025-30438",
      "title": "Share Sheet: A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started",
      "component": "Share Sheet",
      "impact": "A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00291,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24205",
      "url": "https://patchblox.com/security/cve/CVE-2025-24205",
      "title": "Siri: An app may be able to access user-sensitive data",
      "component": "Siri",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24278",
      "url": "https://patchblox.com/security/cve/CVE-2025-24278",
      "title": "System Settings: An app may be able to access protected user data",
      "component": "System Settings",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00285,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30443",
      "url": "https://patchblox.com/security/cve/CVE-2025-30443",
      "title": "Found in Apps: An app may be able to access user-sensitive data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00282,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24236",
      "url": "https://patchblox.com/security/cve/CVE-2025-24236",
      "title": "CoreMedia: An app may be able to access sensitive user data",
      "component": "CoreMedia",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24199",
      "url": "https://patchblox.com/security/cve/CVE-2025-24199",
      "title": "Foundation: An app may be able to cause a denial-of-service",
      "component": "Foundation",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30450",
      "url": "https://patchblox.com/security/cve/CVE-2025-30450",
      "title": "manpages: An app may be able to access sensitive user data",
      "component": "manpages",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24215",
      "url": "https://patchblox.com/security/cve/CVE-2025-24215",
      "title": "CloudKit: A malicious app may be able to access private information",
      "component": "CloudKit",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24280",
      "url": "https://patchblox.com/security/cve/CVE-2025-24280",
      "title": "Shortcuts: An app may be able to access user-sensitive data",
      "component": "Shortcuts",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30455",
      "url": "https://patchblox.com/security/cve/CVE-2025-30455",
      "title": "Dock: A malicious app may be able to access private information",
      "component": "Dock",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31187",
      "url": "https://patchblox.com/security/cve/CVE-2025-31187",
      "title": "Dock: An app may be able to modify protected parts of the file system",
      "component": "Dock",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24261",
      "url": "https://patchblox.com/security/cve/CVE-2025-24261",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24276",
      "url": "https://patchblox.com/security/cve/CVE-2025-24276",
      "title": "App Store: A malicious app may be able to access private information",
      "component": "App Store",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24111",
      "url": "https://patchblox.com/security/cve/CVE-2025-24111",
      "title": "Display: An app may be able to cause unexpected system termination",
      "component": "Display",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31198",
      "url": "https://patchblox.com/security/cve/CVE-2025-31198",
      "title": "zip: A path handling issue was addressed with improved validation",
      "component": "zip",
      "impact": "A path handling issue was addressed with improved validation",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24240",
      "url": "https://patchblox.com/security/cve/CVE-2025-24240",
      "title": "StorageKit: An app may be able to access user-sensitive data",
      "component": "StorageKit",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.7,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43465",
      "url": "https://patchblox.com/security/cve/CVE-2025-43465",
      "title": "ATS: An app may be able to access sensitive user data",
      "component": "ATS",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31261",
      "url": "https://patchblox.com/security/cve/CVE-2025-31261",
      "title": "StorageKit: An app may be able to access protected user data",
      "component": "StorageKit",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31195",
      "url": "https://patchblox.com/security/cve/CVE-2025-31195",
      "title": "TCC: An app may be able to break out of its sandbox",
      "component": "TCC",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24148",
      "url": "https://patchblox.com/security/cve/CVE-2025-24148",
      "title": "LaunchServices: A malicious JAR file may bypass Gatekeeper checks",
      "component": "LaunchServices",
      "impact": "A malicious JAR file may bypass Gatekeeper checks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43205",
      "url": "https://patchblox.com/security/cve/CVE-2025-43205",
      "title": "Audio: An app may be able to bypass ASLR",
      "component": "Audio",
      "impact": "An app may be able to bypass ASLR",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-30431",
      "url": "https://patchblox.com/security/cve/CVE-2025-30431",
      "title": "Game Center: A malicious app may be able to access private information",
      "component": "Game Center",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24165",
      "url": "https://patchblox.com/security/cve/CVE-2025-24165",
      "title": "SMB: An app may be able to cause unexpected system termination",
      "component": "SMB",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}