Severity
High
Analysis Summary
CVE-2025-30453 CVSS:7.8
Apple macOS Ventura could allow a local attacker to gain root privileges, caused by an issue in the DiskArbitration component when using a specially crafted application.
CVE-2025-31223 CVSS:8.8
Apple Safari could allow a remote attacker to execute arbitrary code on the system, caused by an issue in the WebKit component when visiting a specially crafted Website.
CVE-2025-31219 CVSS:7.8
Apple visionOS could allow a local attacker to execute arbitrary code on the system, caused by an error in the Kernel component when using a specially crafted application.
Impact
- Privilege Escalation
- Code Execution
Indicators of Compromise
CVE
CVE-2025-30453
CVE-2025-31223
CVE-2025-31219
Affected Vendors
- Apple
Affected Products
- Apple visionOS - 2.4.0
- Apple Safari - 18.4
- Apple macOS Ventura - 13.7.5
Remediation
Refer to Apple's security advisory for patch, upgrade, or suggested workaround information.