CVE-2025-24232: Apple macOS

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access arbitrary files.

Affected products

• Apple macOS: from 13.0, before 13.7.5 (fixed in 13.7.5); from 14.0, before 14.7.5 (fixed in 14.7.5); from 15.0, before 15.4 (fixed in 15.4)

Published 2025-03-31. Last modified 2026-06-17.