Loading vulnerability…
Kernel Privilege Code Execution in macOS SMB
CVE-2025-24228 is a buffer overflow vulnerability in the SMB component of macOS. The flaw affects supported macOS releases prior to Ventura 13.7.5, Sonoma 14.7.5, and Sequoia 15.4. Apple indicated that the issue was corrected through improved memory handling. Successful exploitation may allow an application to execute arbitrary code with kernel privileges, indicating that the overflow occurs in code reachable from a local app and can cross the user-to-kernel trust boundary.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can result in arbitrary code execution in kernel context. This gives an attacker the ability to run code with the highest privileges on the system, which can enable full device compromise, bypass of operating system security boundaries, installation of persistent kernel-level capabilities, tampering with protected resources, and potential concealment of malicious activity from user-space defenses.
If you can’t patch tonight, do this now.
No vendor workaround has been identified. Risk reduction is primarily achieved by promptly installing the fixed macOS versions. Until patching is completed, reduce exposure by limiting execution of untrusted applications and restricting local code execution pathways that could reach the vulnerable SMB functionality.
Patch, then assume compromise.
Apply Apple's security updates that fix the vulnerability: macOS Ventura 13.7.5, macOS Sonoma 14.7.5, or macOS Sequoia 15.4, as applicable. Systems running earlier affected versions should be upgraded to the vendor-fixed release through normal Apple software update channels.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.