Description
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.
Published: 2025-01-27
Score: 3.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: Local file system modification
Action: Apply Patch
AI Analysis

Impact

A logic flaw in macOS allows an application to modify protected parts of the file system, potentially compromising the integrity of critical system files. The vulnerability arises from insufficient verification checks during operations that write to secured paths, leading to integrity violations that could undermine the trusted state of the operating system.

Affected Systems

Apple macOS systems older than macOS Sequoia 15.3, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3 are affected. The defect is remedied in the stated patched releases.

Risk and Exploitability

The CVSS score of 3.3 reflects low severity, and the EPSS score of less than 1% indicates a very low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. Exploitation requires an application that attempts to write to protected paths, and the impact is confined to the local system, providing a potential integrity breach.

Generated by OpenCVE AI on April 28, 2026 at 12:08 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade macOS to Sequoia 15.3 or later
  • Upgrade macOS to Sonoma 14.7.3 or later
  • Upgrade macOS to Ventura 13.7.3 or later

Generated by OpenCVE AI on April 28, 2026 at 12:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-3632 A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.
History

Tue, 28 Apr 2026 12:30:00 +0000

Type Values Removed Values Added
Title File System Modification via Logic Flaw in macOS

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system. A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.

Mon, 03 Nov 2025 21:30:00 +0000

Type Values Removed Values Added
References

Mon, 24 Mar 2025 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Tue, 28 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-863
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 27 Jan 2025 22:00:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:19:23.884Z

Reserved: 2025-01-17T00:00:44.971Z

Link: CVE-2025-24121

cve-icon Vulnrichment

Updated: 2025-11-03T21:02:21.509Z

cve-icon NVD

Status : Modified

Published: 2025-01-27T22:15:17.230

Modified: 2026-04-02T19:19:02.853

Link: CVE-2025-24121

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T12:15:30Z

Weaknesses