This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Apple fixes over 60 vulnerabilities in various products

Apple fixes over 60 vulnerabilities in its products. Selected ones are listed below; the remaining ones are described at [1][2][3][4][5][6][7][8][9]. Products and their fixed versions: macOS - 13.7.6 [1], 14.7.6 [2], 15.5 [3] iOS - 18.5 [4] iPadOS - 17.7.7 [5], 18.5 [4] watchOS - 11.5 [6] tvOS - 18.5 [7] visionOS - 2.5 [8] Safari - 18.5 [9]

Apple macOS Sequoia - sandbox escape (CVE-2025-31244)
CVSS 8.8 (High)

An authenticated local attacker on macOS Sequoia systems can, due to a vulnerability in the Quarantine security layer, bypass the sandbox and escape its isolation [10][2][3][4].

The vulnerability is present in product:

  • macOS:macOS; >=15.0, <15.5;

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 12. 5. 2025.

Apple macOS Sequoia, macOS Sonoma - kernel memory corruption (CVE-2025-31246)
CVSS 8.1 (High)

An authenticated remote attacker can establish a connection to a malicious AFP server and cause kernel memory corruption due to faulty memory management in the implementation of the AFP (Apple Filing Protocol) protocol in macOS Sequoia and Sonoma [11].

The vulnerability is present in product:

  • macOS:macOS; >=14.0, <14.7.6; >=15.0, <15.5;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

More information:

  • CVE-2025-31246 at cve.org, NVD
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer at cwe.mitre.org

The vulnerability was publicly disclosed 12. 5. 2025.

Apple macOS Sequoia, macOS Sonoma, macOS Ventura - privilege escalation (CVE-2025-24274)
CVSS 7.8 (High)

An authenticated local attacker can elevate the privileges of a malicious application to root level due to a flaw in the Mobile Device Service implementation in macOS Sequoia, Sonoma and Ventura [12].

The vulnerability is present in product:

  • macOS:macOS; >=13.0, <13.7.6; >=14.0, <14.7.6; >=15.0, <15.5;

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 12. 5. 2025.

Apple iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Ventura, visionOS - data leak (CVE-2025-30448)
CVSS 7.5 (High)

An unauthenticated remote attacker can, due to insufficient permission checks in the iCloud Document Sharing component in iOS, iPadOS, macOS Sequoia, Sonoma and Ventura and visionOS, enable folder sharing on iCloud without user authentication [13].

The vulnerability is present in products:

  • iOS:iOS; <18.5;
  • iPadOS:iPadOS; <17.7.7; >=18.0, <18.5;
  • macOS:macOS; >=13.0, <13.7.6; >=14.0, <14.7.6; >=15.0, <15.4;
  • visionOS:visionOS; <2.5;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

More information:

The vulnerability was publicly disclosed 12. 5. 2025.

Apple iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Ventura, watchOS, tvOS, visionOS - kernel memory corruption (CVE-2025-31219)
CVSS 8.1 (High)

An authenticated remote attacker can corrupt kernel memory in Apple iOS, iPadOS, macOS Sequoia, Sonoma and Ventura, watchOS, tvOS and visionOS [14].

The vulnerability is present in products:

  • iOS:iOS; <18.5;
  • iPadOS:iPadOS; <17.7.7; >=18.0, <18.5;
  • macOS:macOS; >=13.0, <13.7.6; >=14.0, <14.7.6; >=15.0, <15.5;
  • watchOS:watchOS; <11.5;
  • tvOS:tvOS; <18.5;
  • visionOS:visionOS; <2.5;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

More information:

  • CVE-2025-31219 at cve.org, NVD
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer at cwe.mitre.org

The vulnerability was publicly disclosed 12. 5. 2025.

Apple iOS, iPadOS, macOS Sequoia, watchOS, tvOS, visionOS, Safari - memory corruption (CVE-2025-31204)
CVSS 7.1 (High)

An unauthenticated remote attacker can, due to faulty memory management in the WebKit component in iOS, iPadOS, macOS Sequoia, watchOS, tvOS and visionOS and in Safari, corrupt memory using social engineering while processing malicious web content [15].

The vulnerability is present in products:

  • iOS:iOS; <18.5;
  • iPadOS:iPadOS; <18.5;
  • macOS:macOS; >=15.0, <15.5;
  • watchOS:watchOS; <11.5;
  • tvOS:tvOS; <18.5;
  • visionOS:visionOS; <2.5;
  • *:Safari; <18.5;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

More information:

  • CVE-2025-31204 at cve.org, NVD
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer at cwe.mitre.org

The vulnerability was publicly disclosed 12. 5. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 16. 5. 2025.

CESNET, z.s.p.o. Logo