Product:
macOS
Summary
The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-24088 |
Exploitation
An attacker can exploit this vulnerability by creating a malicious application that takes advantage of the ability to override MDM-enforced settings. By deploying this application on a target system, the attacker can manipulate device settings without proper authorization, potentially leading to unauthorized access or control over the device.
Affected Products
- macOS Tahoe 26: The latest version that addresses the vulnerability.
Mitigation
To mitigate this issue, users should ensure they are running the latest version of macOS, specifically Tahoe 26, which includes the necessary fixes. Additionally, organizations should review their MDM settings and policies to ensure they are properly enforced and not susceptible to overrides.