CVE-2025-24284
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to break out of its sandbox.
Risk Assessment
Unauthorized actions may lead to security breaches, posing risks to user data and application integrity.
Recommendation
It is recommended to update to macOS Sequoia 15.4 to secure the system against this vulnerability.
Other vulnerabilities in macOS Sequoia
See all- CVE-2025-46293Medium
The issue concerns improper handling of symlinks, which may allow an app to access protected user data. It is fixed in macOS Sequoia 15.4.
- CVE-2025-43278Medium
This issue was addressed with improved handling of symlinks. An app may be able to access protected user data.
- CVE-2025-31272High
The issue was addressed with improved checks. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
- CVE-2025-30459Medium
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4.
- CVE-2025-24268Medium
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to access sensitive user data.
Original NVD description (English source)
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox.