CVE-2025-24248

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to enumerate devices that have signed into the user's Apple Account.

Affected Software

VendorProductVersion RangeStatus
ApplemacOS0 < 15.4affected

Weaknesses

  • An app may be able to enumerate devices that have signed into the user's Apple Account

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References