GHSA-27mf-h76r-wrj9

GHSA-27mf-h76r-wrj9 PUBLISHED CVSS 5.5 MEDIUM

Record from GitHub Advisory Database · Published May 19, 2025

A permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An app may be able to modify protected parts of the file system.

Risk scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Timeline

May 19, 2025 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-27mf-h76r-wrj9
vulnetix vdb fixes GHSA-27mf-h76r-wrj9

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-27mf-h76r-wrj9/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2025-31262 advisory
https://support.apple.com/en-us/122066 url
https://support.apple.com/en-us/122068 url
https://support.apple.com/en-us/122071 url
https://support.apple.com/en-us/122073 url
https://support.apple.com/en-us/122072 url

Look up in the Resolve Platform →