{"id":"CVE-2025-31189","aliases":["EUVD-2025-16429","GHSA-g8qx-492c-9982"],"status":"published","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS...","description":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00198,"percentile":0.09674,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-693"],"published":"2025-05-29T21:34:24Z","modified":"2026-06-17T09:09:59Z","products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/122373","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/122374","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/122375","tags":["Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31189"},{"url":"https://github.com/advisories/GHSA-g8qx-492c-9982"}],"sources":{"cve":[{"id":"CVE-2025-31189","description":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox.","status":"published","published":"2025-05-29T21:34:24.89Z","modified":"2026-04-02T18:11:41.527Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:32:44.763463Z"}],"euvd":[{"id":"EUVD-2025-16429","description":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox.","status":"published","published":"2025-05-29T21:34:24Z","modified":"2026-04-02T18:11:41Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:25:21.269739Z"}],"ghsa":[{"id":"GHSA-g8qx-492c-9982","title":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS...","description":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.","status":"published","published":"2025-05-30T00:31:13Z","modified":"2025-05-31T00:31:34Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T15:02:31.34634Z"}],"nvd":[{"id":"CVE-2025-31189","description":"A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox.","status":"published","published":"2025-05-29T22:15:21.737Z","modified":"2026-06-17T09:09:59.293Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:11:10.143444Z"}]}}