CVE-2025-24093

Permissions issue allows app access to removable volumes without user consent

Published Jan 27, 2025 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.

Analysis

Technical impact

A permissions oversight incorrectly allows certain applications to read or write data on removable storage devices without the user’s explicit consent. This flaw corresponds to CWE-276, where an operating‑system privilege is incorrectly granted, enabling attackers or unwanted apps to access personal files on external media and potentially exfiltrate or modify that data.

Affected Systems

Apple’s macOS is vulnerable across multiple releases; the issue is mitigated in macOS Sequoia 15.4, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3. Systems running any earlier macOS version are at risk, as applications may obtain elevated permissions to removable volumes without user approval.

Risk and Exploitability

The exploitability score is extremely low (EPSS < 1%) and the vulnerability is not listed in the CISA KEV catalog, suggesting limited active exploitation. However, the CVSS v.3.1 score of 9.8 indicates a high technical severity. Attackers can potentially trigger the flaw by installing a malicious or compromised application that leverages the elevated permissions, thus gaining access to data on USB sticks, SD cards, or other removable media.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 13.7.3
`0`	affected	< 14.7.3
`0`	affected	< 15.4

Configuration 1 [-]

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade macOS to at least Sequoia 15.4, Sonoma 14.7.3, or Ventura 13.7.3, which incorporate the permissions fix.
Confirm that the update includes the Apple support references 122069, 122070, or 122373, indicating the remediation has been applied.
Reboot the system to activate the new permission enforcement and ensure all applications run with the updated security checks.

Generated by OpenCVE AI on April 28, 2026 at 04:05 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-3611	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.805% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Apr/8
http://seclists.org/fulldisclosure/2025/Jan/16
http://seclists.org/fulldisclosure/2025/Jan/17
https://support.apple.com/en-us/122069
https://support.apple.com/en-us/122070
https://support.apple.com/en-us/122373

History

Apr 28, 2026 4:30 AM Title updated View changes

Type	Values Removed	Values Added
Title		Permissions issue allows app access to removable volumes without user consent

Apr 2, 2026 8:30 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent.	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.
References		https://support.apple.com/en-us/122373

Nov 3, 2025 9:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Apr/8 http://seclists.org/fulldisclosure/2025/Jan/16 http://seclists.org/fulldisclosure/2025/Jan/17

Mar 24, 2025 3:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos
CPEs		cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple Apple macos

Mar 18, 2025 12:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-276
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Feb 18, 2025 8:45 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses	CWE-125
Metrics	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Jan 28, 2025 4:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-125
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jan 27, 2025 10:00 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent.
References		https://support.apple.com/en-us/122069 https://support.apple.com/en-us/122070