CVE-2025-24259None▾ SunlitThis issue was addressed with additional entitlement checks. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to retrieve Safari bookmarks without an entitlement check.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
0.7% → 0.8%
This issue was addressed with additional entitlement checks. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to retrieve Safari bookmarks without an entitlement check.
macos >= 13.0, < 13.7.5macos >= 14.0, < 14.7.5macos >= 15.0, < 15.4Upgrade past the affected range:
macos 15.4Connected by shared product, vendor, weakness, or advisory.
CVE-2025-24165Medium· 5.5A permissions issue was addressed with additional restrictions
CVE-2025-30459Medium· 5.5A privacy issue was addressed by removing the vulnerable code
CVE-2025-31272High· 7.8The issue was addressed with improved checks
CVE-2026-65327High· 8.4A logic issue was addressed with improved checks
CVE-2026-86929High· 8.8An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-113943Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking