← Back

CVE-2025-31195

nvd nist
Published: May 12, 2025Modified: May 27, 2025

JSON object

Loading...
6.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Exploitability: 1.8 / Impact: 4.0
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox.

Affected (1)

Products: Apple: Macos
Apple
1 product
Macos
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Macos
Before 15.4

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: product-security@apple.com
Release NotesVendor Advisory

Timeline

No history available yet.