VDB
BDU%3A2025-05419
BDU%3A2025-05419
PUBLISHED
CVSS 4.900000095367432 MEDIUM
Уязвимость интерфейса GrantAccessToMultipleFiles фреймворка Core Services операционных систем macOS, iOS, iPadOS и tvOS, позволяющая нарушителю обойти защитный механизм песочницы и получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
4.900000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple Inc. | MacOS, iOS, iPadOS, tvOS |
Timeline
- Jun 3, 2025 CVE Published
- Aug 13, 2025 CVE Updated
References
- https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/ url
- https://news.rambler.ru/tech/54613748-uyazvimost-v-macos-microsoft-nashla-sposob-oboyti-app-sandbox/ url
- https://support.apple.com/en-us/122375 advisory
- https://support.apple.com/en-us/122371 url
- https://support.apple.com/en-us/122373 url
- https://support.apple.com/en-us/122374 advisory
- https://support.apple.com/en-us/122377 advisory