Volerion logoVolerion
Volerion logoVolerion

Apple CoreRoutine Vulnerability Allowing Location Access in Multiple macOS and iPadOS Versions

Vulnerability

A vulnerability in the CoreRoutine component of Apple operating systems can allow an application to access a user's current location. This issue affects iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3. The vulnerability arises from insufficient checks, which could be exploited by apps to determine location information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive location data, allowing apps to track or infer user movements.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.