What is the CVSS score of CVE-2025-24119?

CVE-2025-24119 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2025-24119?

CVE-2025-24119 is a local privilege escalation vulnerability affecting macOS versions 13.7.x through 15.2.x that allows authenticated users to escape application sandboxes and gain elevated system…

How to fix or mitigate CVE-2025-24119?

Within 24 hours: Inventory all macOS devices running versions 13.7.x-15.2.x and identify those not yet updated. Within 7 days: Deploy macOS Ventura 13.7.7, Sonoma 14.7.7, or Sequoia 15.3 or later to all affected devices via Mobile Device Management (MDM) or Software Update Server. Within 30 days: Verify 100% compliance and audit system logs for any unauthorized privilege escalation events on unpatched machines.

macOS CVE-2025-24119

HIGH

Improper Privilege Management (CWE-269)

2025-07-30 product-security@apple.com

Apple macOS RCE Privilege Escalation

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 02, 2026 - 19:37 vuln.today

CVE Published

Jul 30, 2025 - 00:15 nvd

HIGH 7.8

DescriptionCVE.org

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

AnalysisAI

Sandbox escape and privilege escalation in macOS 13.7.x through 15.2.x allow local authenticated users to execute arbitrary code outside application sandboxes or gain elevated privileges via state management flaws. Apple patched this in macOS Ventura 13.7.7, Sonoma 14.7.7, and Sequoia 15.3. With EPSS at 0.02% (5th percentile) and no public exploit identified at time of analysis, real-world risk remains low despite the high CVSS score, though local attackers with existing user-level access could leverage this for post-exploitation privilege escalation.

Technical ContextAI

This vulnerability stems from CWE-269 (Improper Privilege Management), where macOS state management logic fails to properly enforce sandbox boundaries and privilege separation between applications. Apple's sandbox architecture (App Sandbox) relies on kernel-level mandatory access controls to isolate applications from system resources and other apps. State management bugs can create race conditions or logic flaws where privilege checks are bypassed during state transitions. The affected CPE strings indicate widespread impact across macOS Ventura (13.x), Sonoma (14.x), and Sequoia (15.x) releases prior to their respective 13.7.7, 14.7.7, and 15.3 versions. Apple's fix through 'improved state management' suggests remediation of synchronization or validation logic in privilege enforcement code paths.

RemediationAI

Vendor-released patches are available: upgrade to macOS Sequoia 15.3, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7 depending on your major version branch. Apple addresses this through operating system updates distributed via System Preferences/Settings > General > Software Update or through enterprise management tools. No workarounds are documented for this vulnerability as it requires kernel-level state management fixes. Organizations should prioritize patching systems where local user access is shared among multiple users or where endpoints process untrusted content that could be chained with this sandbox escape. Full security release notes and update instructions are available in Apple's support documents at the reference URLs above.