Critical severity9.8NVD Advisory· Published Mar 31, 2025· Updated Apr 2, 2026
CVE-2025-31194
CVE-2025-31194
Description
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A Shortcut may run with admin privileges without authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <13.7.5
- (no CPE)range: 15.4 / 14.7.5 / 13.7.5
Patches
Vulnerability mechanics
References
6- support.apple.com/en-us/122373nvdRelease NotesVendor Advisory
- support.apple.com/en-us/122374nvdRelease NotesVendor Advisory
- support.apple.com/en-us/122375nvdRelease NotesVendor Advisory
- seclists.org/fulldisclosure/2025/Apr/10nvd
- seclists.org/fulldisclosure/2025/Apr/8nvd
- seclists.org/fulldisclosure/2025/Apr/9nvd
News mentions
0No linked articles in our index yet.