PT-2025-13879 · Apple · Ios+6

Published

2025-03-31

·

Updated

2025-04-02

·

CVE-2025-24178

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5
Description The issue allows an app to potentially break out of its sandbox. This was addressed through improved state management.
Recommendations For macOS Ventura versions prior to 13.7.5, update to macOS Ventura 13.7.5. For tvOS versions prior to 18.4, update to tvOS 18.4. For iPadOS versions prior to 17.7.6, update to iPadOS 17.7.6. For iOS versions prior to 18.4, update to iOS 18.4. For iPadOS versions prior to 18.4, update to iPadOS 18.4. For macOS Sequoia versions prior to 15.4, update to macOS Sequoia 15.4. For macOS Sonoma versions prior to 14.7.5, update to macOS Sonoma 14.7.5.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-05537
CVE-2025-24178

Affected Products

Apple Macos
Ios
Ipados
Macos Sequoia
Macos Sonoma
Macos Ventura
Tvos