8.8
High
CVE-2025-24150 A privacy issue was addressed with improved handling of files
Description
A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from Web Inspector may lead to command injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| macOS 15.3 | earliest → < 15.3 | 15.3 |
| Safari 18.3 | earliest → < 18.3 | 18.3 |
| iOS and iPadOS 18.3 | earliest → < 18.3 | 18.3 |
Other CVEs of macOS
The 3813 CVEs of macOS →
CVE-2026-86925
An authorization issue was addressed with improved state management
5.5
Medium
CVE-2026-84627
A buffer overflow was addressed with improved bounds checking
7.8
High
CVE-2026-113945
An out-of-bounds read was addressed with improved bounds checking
5.5
Medium
CVE-2026-65327
A logic issue was addressed with improved checks
8.4
High