CVE-2025-24176

Local Privilege Escalation Allowing a Local Attacker to Gain Elevated Privileges on macOS

Published Jan 27, 2025 CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Description

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A local attacker may be able to elevate their privileges.

Analysis

Technical impact

A local permission validation flaw allows a user with limited rights to gain elevated privileges on macOS. The weakness, classified as CWE‑276, permits the attacker to bypass intended access controls and assume higher system permissions, compromising confidentiality, integrity, and availability of data and services on the affected machine.

Affected Systems

Apple macOS is affected. Versions prior to macOS Sequoia 15.3, Sonoma 14.7.3, and Ventura 13.7.3 are vulnerable to this local privilege escalation issue.

Risk and Exploitability

The CVSS rating of 7.1 signals a high severity vulnerability, while an EPSS score of less than 1% indicates a very low exploitation probability at present. The vulnerability is not listed in the CISA KEV catalog. An attacker who can run code locally on the device can exploit this flaw, but the description does not provide evidence for remote or network-triggered exploitation; based on available information, it is inferred that remote exploitation is not supported.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 13.7.3
`0`	affected	< 14.7.3
`0`	affected	< 15.3

Configuration 1 [-]

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade the operating system to macOS Sequoia 15.3, Sonoma 14.7.3, or Ventura 13.7.3, which contain the fix for the permission validation issue.
Restrict local administrator privileges by disabling or removing unnecessary local admin accounts, thereby narrowing the attack surface.
Configure the system to perform automatic or timely software updates, ensuring any subsequent security patches are deployed promptly.

Generated by OpenCVE AI on April 29, 2026 at 02:05 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-3669	A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.214% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Jan/15
http://seclists.org/fulldisclosure/2025/Jan/16
http://seclists.org/fulldisclosure/2025/Jan/17
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122069
https://support.apple.com/en-us/122070

History

Apr 29, 2026 2:30 AM Title updated View changes

Type	Values Removed	Values Added
Title		Local Privilege Escalation Allowing a Local Attacker to Gain Elevated Privileges on macOS

Apr 2, 2026 8:30 PM Description updated View changes

Type	Values Removed	Values Added
Description	A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.	A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A local attacker may be able to elevate their privileges.

Nov 3, 2025 9:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Jan/15 http://seclists.org/fulldisclosure/2025/Jan/16 http://seclists.org/fulldisclosure/2025/Jan/17

Mar 24, 2025 3:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos
CPEs		cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple Apple macos

Jan 28, 2025 4:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-276
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jan 27, 2025 10:00 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.
References		https://support.apple.com/en-us/122068 https://support.apple.com/en-us/122069 https://support.apple.com/en-us/122070