{"id":"CVE-2025-24116","state":"PUBLISHED","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypa","description":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences.","publishedAt":"2025-01-27T21:46:21.503Z","updatedAt":"2026-04-02T18:21:21.340Z","severity":{"score":4.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"13.7.3","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7.3","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.3","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/122068","https://support.apple.com/en-us/122069","https://support.apple.com/en-us/122070","http://seclists.org/fulldisclosure/2025/Jan/17","http://seclists.org/fulldisclosure/2025/Jan/16","http://seclists.org/fulldisclosure/2025/Jan/15"],"weaknesses":["CWE-862"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/24xxx/CVE-2025-24116.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-24116","state":"PUBLISHED","datePublished":"2025-01-27T21:46:21.503Z","dateUpdated":"2026-04-02T18:21:21.340Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2025-01-17T00:00:44.970Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"13.7.3","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7.3","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.3","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/122068"},{"url":"https://support.apple.com/en-us/122069"},{"url":"https://support.apple.com/en-us/122070"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to bypass Privacy preferences"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:21:21.340Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-01-28T16:16:02.541926Z","id":"CVE-2025-24116","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-862","type":"CWE","lang":"en","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-04T21:34:10.398Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2025/Jan/17"},{"url":"http://seclists.org/fulldisclosure/2025/Jan/16"},{"url":"http://seclists.org/fulldisclosure/2025/Jan/15"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T21:02:03.508Z"}}]}}}