CVE-2025-24204

—

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Mar 31, 2025 (Mar 31, 2025)

Modified

Jun 17, 2026

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

Vendors: apple
Products: macos
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news3 stories

⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

The Hacker NewsDec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690 CVE-2025-38352 CVE-2025-48543+25 CVEs1

60

Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerability

Help Net SecuritySep 7, 00:00 UTC · Sep 7, 2025Vulnerability in the wildCVE-2025-53690 CVE-2025-24204 CVE-2025-48543+2 CVEs

60

macOS vulnerability allowed Keychain and iOS app decryption without a password

Help Net SecuritySep 4, 00:00 UTC · Sep 4, 2025Vulnerability in the wildCVE-2025-24204

60