- 85/2025
- High
Apple has released security updates to address several vulnerabilities across macOS Sequoia.
The addressed vulnerabilities could allow the attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system.
The addressed vulnerabilities:
1. Apple macOS Sequoia Code Execution Vulnerability ( CVE-2025-31200):
- CVSS: 7.5
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
2. Apple macOS Sequoia Security Bypass Vulnerability ( CVE-2025-31201):
- CVSS: 6.8
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: Low
- User Interaction: None
- Consequences: Bypass Security
It should be highlighted that Apple is aware that the zero-day vulnerabilities in CoreAudio “CVE-2025-31200” and RPAC“ CVE-2025-31201” are being exploited in the wild, impacting iOS, macOS, tvOS, iPadOS, and visionOS.
Vulnerabilities
- CVE-2025-31200
- CVE-2025-31201
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.