CVE-2025-24099

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A local attacker may be able to elevate their privileges.

• CWE-863

• https://support.apple.com/en-us/122068Release Notes, Vendor Advisory
• https://support.apple.com/en-us/122069Release Notes, Vendor Advisory
• https://support.apple.com/en-us/122070Release Notes, Vendor Advisory

Published

Jan 30, 2025

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24092This issue was addressed with improved data protection. This…5.5
• CVE-2025-24093A permissions issue was addressed with additional restrictio…9.8
• CVE-2025-24094A race condition was addressed with additional validation. T…4.7
• CVE-2025-24095This issue was addressed with additional entitlement checks.…7.6
• CVE-2025-24096This issue was addressed through improved state management. …5.5
• CVE-2025-24097A permissions issue was addressed with additional restrictio…5
• CVE-2025-2410Port manipulation vulnerabilities in ASPECT provide attacker…9.1
• CVE-2025-24100A logic issue was addressed with improved restrictions. This…3.3
• CVE-2025-24101This issue was addressed with improved redaction of sensitiv…5.5
• CVE-2025-24102The issue was addressed with improved checks. This issue is …9.8
• CVE-2025-24103This issue was addressed with improved validation of symlink…5.5
• CVE-2025-24104This issue was addressed with improved handling of symlinks.…5.5