CVE-2025-24102CRITICAL 9.8EPSS p54.5%
CVE-2025-24102CVE-2025-24102
Description
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location.
Scoring
| CVSS 3.1 | 9.8 (CRITICAL) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.88% probability of exploitation · percentile 54.5% · 2026-06-19T12:03:05Z |
| Published | 2025-01-27 |
| Last modified | 2025-11-03 |
Underlying weaknesses· 1
References
- https://support.apple.com/en-us/122067
- https://support.apple.com/en-us/122068
- https://support.apple.com/en-us/122069
- https://support.apple.com/en-us/122070
- http://seclists.org/fulldisclosure/2025/Jan/14
- http://seclists.org/fulldisclosure/2025/Jan/15
- http://seclists.org/fulldisclosure/2025/Jan/16
- http://seclists.org/fulldisclosure/2025/Jan/17
1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Exposure of Sensitive Information to an Unauthorized Actorcwe-200 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.