GHSA-5cgr-6hjx-88v5CriticalCVSS 9.8
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura...
🔗 CVE IDs covered (1)
📋 Description
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to retrieve Safari bookmarks without an entitlement check.
🔗 References (10)
- https://nvd.nist.gov/vuln/detail/CVE-2025-24259
- https://support.apple.com/en-us/122373
- https://support.apple.com/en-us/122374
- https://support.apple.com/en-us/122375
- http://seclists.org/fulldisclosure/2025/May/6
- http://seclists.org/fulldisclosure/2025/Apr/10
- http://seclists.org/fulldisclosure/2025/Apr/8
- http://seclists.org/fulldisclosure/2025/Apr/9
- https://support.apple.com/en-us/122405
- https://github.com/advisories/GHSA-5cgr-6hjx-88v5