Apple Patches macOS Flaws Allowing Remote Takeover

Apple patched several critical vulnerabilities in macOS’s SMBClient that exposed users to remote code execution and system crashes. These flaws, identified as CVE-2025-24269 and CVE-2025-24235, affect the SMB filesystem client used for mounting remote file shares. Apple patches macOS flaws by improving input validation and enforcing stricter access controls, urging users to update immediately and disable SMB services when not in use.

The most severe of the issues, CVE-2025-24269, allows a remote attacker to trigger a kernel heap overflow via malformed SMB2 compressed data. By exploiting weaknesses in how the system handles compression lengths, an attacker can overwrite heap memory and gain code execution capabilities. Apple patches macOS flaws like this by verifying length values before copying memory.

A second vulnerability in the Kerberos Helper component leads to memory corruption during authentication. A third flaw allows unprivileged users to crash systems by sending unauthorized signals to critical processes.

Read the full report at

macOS SMBClient Vulnerability Allows Remote Code Execution and Kernel Crash