Description
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read sensitive location information.
Published: 2025-05-29
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Sensitive Location Disclosure
Action: Patch Now
AI Analysis

Impact

A permissions issue in Apple macOS allows applications to read sensitive location information more broadly than intended. The flaw was addressed by adding restrictions, and the fix is available in macOS Sequoia 15.4.

Affected Systems

Apple macOS Sequoia versions prior to 15.4 are affected. The vulnerability is resolved in macOS Sequoia 15.4 and later releases.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation. The flaw likely requires a local application to access location data beyond its intended scope. There is no mention of a network-based attack vector, and the vulnerability is not listed in CISA’s KEV catalog.

Generated by OpenCVE AI on April 28, 2026 at 01:30 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to macOS Sequoia 15.4 or later
  • Restrict application permissions to limit location access
  • Disable location services for non-essential applications

Generated by OpenCVE AI on April 28, 2026 at 01:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-16425 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read sensitive location information.
References
Link Providers
https://support.apple.com/en-us/122373 cve-icon cve-icon
History

Tue, 28 Apr 2026 02:00:00 +0000

Type Values Removed Values Added
Title macOS Sequoia Location Permissions Issue Exposing Sensitive Data

Mon, 02 Jun 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Fri, 30 May 2025 22:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 29 May 2025 21:45:00 +0000

Type Values Removed Values Added
Description A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read sensitive location information.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:19:30.119Z

Reserved: 2025-03-27T16:13:58.322Z

Link: CVE-2025-31231

cve-icon Vulnrichment

Updated: 2025-05-30T14:42:25.009Z

cve-icon NVD

Status : Analyzed

Published: 2025-05-29T22:15:22.050

Modified: 2025-06-02T16:00:08.337

Link: CVE-2025-31231

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T01:45:18Z

Weaknesses