NVD disclosure day

Published threat advisories for March 31, 2025

CVE-2025-24259

macOS Safari Bookmark Access Without Entitlement Check

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Apple operating systems allows an application to access Safari bookmarks without proper authorization, potentially leading to unauthorized data disclosure. This issue is relevant for devices running affected macOS and iPadOS versions.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2025-31125

Frontend Tooling Framework Information Exposure Advisory

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

Vite development servers can expose non-allowed file content when networked, risking unauthorized data access for affected organizations.

NVD modified: NVD date unavailable • CISA KEV