Rodolphe BRUNETTI found a vulnerability, patched in the latest Apple update :

CVE in Spotlight

Spotlight
Available for: macOS Sequoia
Impact: A malicious application may be able to leak sensitive user information
Description: This issue was addressed through improved state management.

CVE-2025-24138: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

Links

• Apple Security Advisory macOS Sequoia 15.3
• Apple Security Advisory macOS Sonoma 14.7.3
• Apple Security Advisory macOS Ventura 13.7.3
• NIST entry CVE-2025-24138