VDB
GCVE-110-NCSC-2025-351
GCVE-110-NCSC-2025-351
Advisory PublishedCVSS 5.9/10
macOS Sequoia 15.7.2 has resolved a permissions issue that previously allowed unauthorized access to sensitive user data by implementing additional restrictions.
Weaknesses (CWE)
CWE-276Incorrect Default PermissionsCWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')CWE-1333Inefficient Regular Expression ComplexityCWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CWE-532Insertion of Sensitive Information into Log FileCWE-863Incorrect AuthorizationCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-284Improper Access ControlCWE-20Improper Input ValidationCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Risk Scores
CVSS 3.1
5.9/10
Medium · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Apple | vers:unknown/* | — | — |
Aliases
CVE-2024-43398CVE-2024-49761CVE-2025-30465CVE-2025-31199CVE-2025-32462CVE-2025-43292CVE-2025-43322CVE-2025-43334CVE-2025-43335CVE-2025-43336CVE-2025-43337CVE-2025-43338CVE-2025-43348CVE-2025-43351CVE-2025-43361CVE-2025-43364CVE-2025-43372CVE-2025-43373CVE-2025-43377CVE-2025-43378CVE-2025-43379CVE-2025-43380CVE-2025-43381CVE-2025-43382CVE-2025-43383CVE-2025-43384CVE-2025-43385CVE-2025-43386CVE-2025-43387CVE-2025-43388CVE-2025-43389CVE-2025-43390CVE-2025-43391CVE-2025-43392CVE-2025-43393CVE-2025-43394CVE-2025-43395CVE-2025-43396CVE-2025-43397CVE-2025-43398CVE-2025-43399CVE-2025-43401CVE-2025-43402CVE-2025-43404CVE-2025-43405CVE-2025-43406CVE-2025-43407CVE-2025-43408CVE-2025-43409CVE-2025-43411CVE-2025-43412CVE-2025-43413CVE-2025-43414CVE-2025-43420CVE-2025-43421CVE-2025-43423CVE-2025-43424CVE-2025-43425CVE-2025-43426CVE-2025-43427CVE-2025-43429CVE-2025-43430CVE-2025-43431CVE-2025-43432CVE-2025-43433CVE-2025-43434CVE-2025-43435CVE-2025-43436CVE-2025-43438CVE-2025-43440CVE-2025-43441CVE-2025-43443CVE-2025-43444CVE-2025-43445CVE-2025-43446CVE-2025-43447CVE-2025-43448CVE-2025-43455CVE-2025-43457CVE-2025-43458CVE-2025-43461CVE-2025-43462CVE-2025-43463CVE-2025-43464CVE-2025-43465CVE-2025-43466CVE-2025-43467CVE-2025-43468CVE-2025-43469CVE-2025-43471CVE-2025-43472CVE-2025-43473CVE-2025-43474CVE-2025-43476CVE-2025-43477CVE-2025-43478CVE-2025-43479CVE-2025-43480CVE-2025-43481CVE-2025-43493CVE-2025-43496CVE-2025-43497CVE-2025-43498CVE-2025-43499CVE-2025-43500CVE-2025-43502CVE-2025-43503CVE-2025-43506CVE-2025-43507CVE-2025-53906CVE-2025-6442
References
Browse GCVE Records
76,203 records in the GCVE database · Updated August 6, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.