CVE-2025-24165
published 2026-06-11CVE-2025-24165: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app…
PriorityP419medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.12%
2.3th percentile
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 13.7.5 | 13.7.5 |
| apple | macos | < 14.7.5 | 14.7.5 |
| apple | macos | < 15.4 | 15.4 |
| apple | macos | >= 13.0 < 13.7.5 | 13.7.5 |
| apple | macos | >= 14.0 < 14.7.5 | 14.7.5 |
| apple | macos | >= 15.0 < 15.4 | 15.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A permissions issue was addressed with additional restrictions.
ghsa_unreviewed·2026-06-11
CVE-2025-24165 [MEDIUM] CWE-284 A permissions issue was addressed with additional restrictions.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.
VulDB
Apple macOS up to 13.7.4/14.7.4/15.3 App permission
vuldb·2026-06-11
CVE-2025-24165 [CRITICAL] Apple macOS up to 13.7.4/14.7.4/15.3 App permission
A vulnerability categorized as critical has been discovered in Apple macOS up to 13.7.4/14.7.4/15.3. This impacts an unknown function of the component App. The manipulation results in permission issues.
This vulnerability is cataloged as CVE-2025-24165. The attack must be initiated from a local position. There is no exploit available.
It is advisable to upgrade the affected component.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-11
Published