CVE-2025-24148

CRITICAL Year: 2025
CVSS v3 Score
9.8
Critical
Weakness Type
CWE-354
View all →

Vulnerability Description

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks.

Related Vulnerabilities

CVE-2017-15994

CRITICAL
CVSS:9.8(Critical)

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has signif...

CWE-3542017

CVE-2023-28386

CRITICAL
CVSS:9.8(Critical)

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does not check using a private-public key mecha...

CWE-3542023

CVE-2023-33668

CRITICAL
CVSS:9.8(Critical)

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.

CWE-3542023

CVE-2022-29898

CRITICAL
CVSS:9.1(Critical)

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper ...

CWE-3542022

CVE-2024-3596

CRITICAL
CVSS:9.0(Critical)

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a...

CWE-3542024

CVE-2017-4961

HIGH
CVSS:8.8(High)

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum ...

CWE-3542017