vulnerability
OS X update for AirPlay (CVE-2025-24271)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:A/AC:L/Au:N/C:P/I:P/A:N) | Apr 29, 2025 | Apr 29, 2025 | Aug 13, 2025 |
Severity
5
CVSS
(AV:A/AC:L/Au:N/C:P/I:P/A:N)
Published
Apr 29, 2025
Added
Apr 29, 2025
Modified
Aug 13, 2025
Description
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing.
Solutions
apple-osx-upgrade-13_7_5apple-osx-upgrade-14_7_5apple-osx-upgrade-15_4
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.