Cyber Posture

CVE-2025-24273

Critical

Published: 31 March 2025

Published
31 March 2025
Modified
02 April 2026
KEV Added
Patch
CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0070 72.0th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

Security Summary

CVE-2025-24273 is an out-of-bounds write vulnerability (CWE-787) affecting Apple's macOS operating system. The issue, addressed through improved bounds checking, impacts macOS Sequoia versions prior to 15.4, macOS Sonoma prior to 14.7.5, and macOS Ventura prior to 13.7.5. It carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its potential for high-impact confidentiality, integrity, and availability consequences.

A remote attacker with no privileges or user interaction can exploit this vulnerability over the network with low complexity. Exploitation allows an app to cause unexpected system termination, effectively enabling denial-of-service, or to corrupt kernel memory, which could facilitate further privilege escalation or persistent system compromise.

Apple's security advisories detail the fix via improved bounds checking in the specified macOS updates (https://support.apple.com/en-us/122373, https://support.apple.com/en-us/122374, https://support.apple.com/en-us/122375). Additional details appear in full disclosure postings (http://seclists.org/fulldisclosure/2025/Apr/10, http://seclists.org/fulldisclosure/2025/Apr/8). Security practitioners should prioritize patching affected systems to mitigate risks.

Details

CWE(s)
CWE-787

Affected Products

apple
macos
13.0 — 13.7.5 · 14.0 — 14.7.5 · 15.0 — 15.4

MITRE ATT&CK Enterprise Techniques

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Out-of-bounds write enables remote kernel memory corruption for privilege escalation (T1068) and system termination via exploitation (T1499.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References