vulnerability

OS X update for AirDrop (CVE-2025-24097)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:S/C:C/I:N/A:N)

Published

Apr 1, 2025

Added

Apr 1, 2025

Modified

Apr 6, 2026

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata.

Solutions

apple-osx-upgrade-14_7_5apple-osx-upgrade-15_4

References

CVE-2025-24097
https://attackerkb.com/topics/CVE-2025-24097
CWE-125
EUVD-EUVD-2025-9030
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-9030
https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122374

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report