Description
A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iPadOS | < 17.7.6 |
| Apple | macOS | < 13.7.5; < 14.7.5; < 14.8.2; < 15.4; < 15.7.2; < 26.1 |
References
- https://support.apple.com/en-us/122372Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122373Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122374Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122375Release Notes, Vendor Advisory
- https://support.apple.com/en-us/125634
- https://support.apple.com/en-us/125635
- https://support.apple.com/en-us/125636
- http://seclists.org/fulldisclosure/2025/Apr/10
- http://seclists.org/fulldisclosure/2025/Apr/5
- http://seclists.org/fulldisclosure/2025/Apr/8
- http://seclists.org/fulldisclosure/2025/Apr/9
Timeline
- Published
- Mar 31, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Modified