{"id":"CVE-2025-24196","aliases":["EUVD-2025-9011","GHSA-4x4g-h2vr-367c"],"status":"published","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00931,"percentile":0.60903,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2025-03-31T22:23:17Z","modified":"2026-07-09T15:00:37Z","products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/122373","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/122374","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/9"},{"url":"http://seclists.org/fulldisclosure/2025/Apr/8"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24196"},{"url":"https://github.com/advisories/GHSA-4x4g-h2vr-367c"}],"sources":{"cve":[{"id":"CVE-2025-24196","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.","status":"published","published":"2025-03-31T22:23:17.18Z","modified":"2026-07-09T15:00:37.601Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:32:43.770144Z"}],"euvd":[{"id":"EUVD-2025-9011","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.","status":"published","published":"2025-03-31T22:23:17Z","modified":"2026-07-09T15:00:37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:04.126011Z"}],"ghsa":[{"id":"GHSA-4x4g-h2vr-367c","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.","status":"published","published":"2025-04-01T00:30:36Z","modified":"2025-11-03T21:34:23Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:04:24.41654Z"}],"nvd":[{"id":"CVE-2025-24196","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.","status":"published","published":"2025-03-31T23:15:18.007Z","modified":"2026-06-17T08:58:17.227Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:10:57.134561Z"}]}}
