CVE-2025-31194
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 31, 2025
Updated: Apr 4, 2025
CWE ID 862
Summary
CVE-2025-31194 is a vulnerability affecting macOS where an authentication issue related to state management was identified. This flaw allowed a Shortcut to execute with admin privileges without requiring authentication. This security concern has been resolved in the latest updates of macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Users are advised to install the patches promptly to mitigate this risk and ensure the security of their systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MacOS
Affected Vendors
- Apple