Main Vulnerability Database Vulnerabilities #VU106892

#VU106892 Information disclosure in macOS - CVE-2025-24198

Published: April 2, 2025

Vulnerability identifier: #VU106892

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2025-24198

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
macOS

Software vendor:
Apple Inc.

Description

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by Siri. An attacker with physical access to device can use Siri to access sensitive user data.

Install updates from vendor's website.