CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-24143: The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and...

Description

The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user.

Classification

CVE ID: CVE-2025-24143

Affected Products

Vendor: Apple

Product: visionOS

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.06% (probability of being exploited)

EPSS Percentile: 28.09% (scored less or equal to compared to others)

EPSS Date: 2025-02-25 (when was this score calculated)

References

https://support.apple.com/en-us/122073
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122074
https://support.apple.com/en-us/122066

Timeline