CVE-2025-24245: Apple macOS

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords.

Affected products

• Apple macOS: before 15.4 (fixed in 15.4)

Published 2025-03-31. Last modified 2026-06-17.