{"metadata": {"vulnerability": "cve-2025-1413", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-02-18T12:50:04.300Z", "date_only": false, "value": "2025-02-18T12:50:04.300Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-1413", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-28T08:25:24.641Z", "date_only": false, "value": "2025-02-28T08:25:24.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-1413", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-28T09:15:11Z", "date_only": false, "value": "2025-02-28T09:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-47M3-CR54-PVMQ", "record": "GHSA-47M3-CR54-PVMQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-28T09:15:11.850Z", "date_only": false, "value": "2025-02-28T09:15:11.850", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1413", "record": "FKIE_CVE-2025-1413", "field": "published"}, {"timestamp": "2025-02-28T09:27:20Z", "date_only": false, "value": "2025-02-28T09:27:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5851", "record": "CVE-2025-1413", "field": "creation_timestamp", "uuid": "59b377b7-7a19-41a4-aa2c-e53c2e92ae63", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1413\n\ud83d\udd25 CVSS Score: 9.2 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N)\n\ud83d\udd39 Description: DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and applications can exploit this vulnerability for privilege escalation. This issue affects DaVinci Resolve on MacOS in versions\u00a0before 19.1.3.\n\ud83d\udccf Published: 2025-02-28T08:25:24.641Z\n\ud83d\udccf Modified: 2025-02-28T08:25:24.641Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/02/CVE-2025-1413/\n2. https://cert.pl/posts/2025/02/CVE-2025-1413/\n3. https://apps.apple.com/pl/app/davinci-resolve/id571213070?mt=12", "url": "https://t.me/DarkWebInformer_CVEAlerts/5851"}, {"timestamp": "2025-02-28T09:30:55Z", "date_only": false, "value": "2025-02-28T09:30:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-47M3-CR54-PVMQ", "record": "GHSA-47M3-CR54-PVMQ", "field": "published"}, {"timestamp": "2025-02-28T09:43:48.983Z", "date_only": false, "value": "2025-02-28T09:43:48.983602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lja4meodgz2w", "record": "CVE-2025-1413", "field": "creation_timestamp", "uuid": "1640d644-6c69-4ba4-9eb0-e2cfc50bf300", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lja4meodgz2w"}, {"timestamp": "2025-02-28T10:00:46Z", "date_only": false, "value": "2025-02-28T10:00:46.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tzst3T7SuES_eL4Dw73eYpZnj8xogMY6-vkCUQFTMfYlq5w", "record": "CVE-2025-1413", "field": "creation_timestamp", "uuid": "e775ba72-6414-431b-aa33-1c8d5281c46a"}, {"timestamp": "2025-02-28T11:00:00Z", "date_only": false, "value": "2025-02-28T11:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "cve-2025-1413", "field": "containers.cna.datePublic"}, {"timestamp": "2025-02-28T11:10:27Z", "date_only": false, "value": "2025-02-28T11:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19139", "record": "CVE-2025-1413", "field": "creation_timestamp", "uuid": "2170bfb8-b83f-4337-9f07-3928e8d19ce5", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1413 - Blackmagic Design DaVinci Resolve MacOS File Permission Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1413 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and applications can exploit this vulnerability for privilege escalation. This issue affects DaVinci Resolve on MacOS in versions\u00a0before 19.1.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19139"}, {"timestamp": "2025-02-28T13:18:32.916Z", "date_only": false, "value": "2025-02-28T13:18:32.916960Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1413", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-28T13:18:32.916Z", "date_only": false, "value": "2025-02-28T13:18:32.916960Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1413", "record": "FKIE_CVE-2025-1413", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-28T13:18:48.035Z", "date_only": false, "value": "2025-02-28T13:18:48.035Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1413", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-05T12:16:47.658Z", "date_only": false, "value": "2025-03-05T12:16:47.658103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljmxii2rgs23", "record": "CVE-2025-1413", "field": "creation_timestamp", "uuid": "e03c01ab-d6a2-4f1e-b6b4-b9b0fe56ae43", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljmxii2rgs23"}, {"timestamp": "2025-08-22T13:26:18Z", "date_only": false, "value": "2025-08-22T13:26:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "record": "CVE-2025-1413", "field": "creation_timestamp", "uuid": "1f9d3b6b-43ff-4977-9304-e6a0fef8eb1b"}, {"timestamp": "2025-10-03T09:05:06.426Z", "date_only": false, "value": "2025-10-03T09:05:06.426Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-1413", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-03T09:05:06.426Z", "date_only": false, "value": "2025-10-03T09:05:06.426Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "cve-2025-1413", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-03T09:30:19Z", "date_only": false, "value": "2025-10-03T09:30:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-47M3-CR54-PVMQ", "record": "GHSA-47M3-CR54-PVMQ", "field": "modified"}, {"timestamp": "2026-06-17T08:39:05.490Z", "date_only": false, "value": "2026-06-17T08:39:05.490", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1413", "record": "FKIE_CVE-2025-1413", "field": "lastModified"}]}