This vulnerability (CVE-2025-24093) involves a permissions issue in Apple macOS that could allow an application to access removable storage volumes without explicit user consent. Apple fixed the issue by implementing additional restrictions in macOS Sequoia 15.4, Sonoma 14.7.3, and Ventura 13.7.3. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The weakness corresponds to CWE-276 (Incorrect Default Permissions).

If exploited, this vulnerability could allow unauthorized applications to read from or write to removable storage devices without user permission, potentially leading to data exposure, modification, or destruction. The critical CVSS score indicates a severe risk to system security and user data confidentiality and integrity. No known active exploitation has been reported.

Apple has released official fixes in macOS Sequoia 15.4, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3 that address this permissions issue by adding additional restrictions. Users and administrators should apply these updates promptly to mitigate the vulnerability. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated beyond applying the official updates.