macOS Sequoia 15.3 Update is now Available!

UPDATED: 1/30/25

This article will be continually updated as new information comes in.

Apple just dropped the 3rd Major release for Sequoia, macOS Sequoia 15.3 Update! Let’s jump in and find out what’s new.

This update adds Genmoji creation in Messages and other apps plus introduces changes around how Apple Intelligence is enabled. Staring in Sequoia 15.3, Apple Intelligence is enabled by default in the setup assistant. Take a closer look at the macOS Sequoia Enterprise notes for more details.

Overview

The macOS 15.2 SDK provides support to develop apps for Mac computers running Sequoia 15.3. The SDK comes bundled with Xcode 16.2, available from the Mac App Store. For information on the compatibility requirements for Xcode 16.2, see Xcode 16.2 Release Notes.

Apple Intelligence

New Features

• For users new or upgrading to macOS 15.3, Apple Intelligence will be enabled automatically during Mac onboarding. Users will have access to Apple Intelligence features after setting up their devices. To disable Apple Intelligence, users will need to navigate to the Apple Intelligence & Siri Settings pane and turn off the Apple Intelligence toggle. This will disable Apple Intelligence features on their device. (141646607)

SwiftUI

Resolved Issues

• Fixed: The .onKeyPress modifier might not work on TextField or TextEditor that are in a NavigationSplitView. (141181452)

StorageKit

Available for: macOS Sequoia

Impact: A local attacker may be able to elevate their privileges

Description: A permissions issue was addressed with improved validation.

CVE-2025-24176: Yann GASCUEL of Alter Solutions

System Extensions

Available for: macOS Sequoia

Impact: An app may be able to gain elevated privileges

Description: This issue was addressed with improved message validation.

CVE-2025-24135: Arsenii Kostromin (0x3c3e)

Time Zone

Available for: macOS Sequoia

Impact: An app may be able to view a contact’s phone number in system logs

Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2025-24145: Kirin (@Pwnrin)

TV App

Available for: macOS Sequoia

Impact: An app may be able to read sensitive location information

Description: This issue was addressed with improved data protection.

CVE-2025-24092: Adam M.

WebContentFilter

Available for: macOS Sequoia

Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write was addressed with improved input validation.

CVE-2025-24154: an anonymous researcher

WebKit

Available for: macOS Sequoia

Impact: A maliciously crafted webpage may be able to fingerprint the user

Description: The issue was addressed with improved access restrictions to the file system.

WebKit Bugzilla: 283117

CVE-2025-24143: an anonymous researcher

WebKit

Available for: macOS Sequoia

Impact: Processing web content may lead to a denial-of-service

Description: The issue was addressed with improved memory handling.

WebKit Bugzilla: 283889

CVE-2025-24158: Q1IQ (@q1iqF) of NUS CuriOSity and P1umer (@p1umer) of Imperial Global Singapore.

WebKit

Available for: macOS Sequoia

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: This issue was addressed through improved state management.

WebKit Bugzilla: 284159

CVE-2025-24162: linjy of HKUS3Lab and chluo of WHUSecLab

WebKit Web Inspector

Available for: macOS Sequoia

Impact: Copying a URL from Web Inspector may lead to command injection

Description: A privacy issue was addressed with improved handling of files.

WebKit Bugzilla: 283718

CVE-2025-24150: Johan Carlsson (joaxcar)

WindowServer

Available for: macOS Sequoia

Impact: An attacker may be able to cause unexpected app termination

Description: This issue was addressed by improved management of object lifetimes.

CVE-2025-24120: PixiePoint Security

Xsan

Available for: macOS Sequoia

Impact: An app may be able to elevate privileges

Description: An integer overflow was addressed through improved input validation.

CVE-2025-24156: an anonymous researcher

Additional recognition

Audio

We would like to acknowledge Google Threat Analysis Group for their assistance.

CoreAudio

We would like to acknowledge Google Threat Analysis Group for their assistance.

CoreMedia Playback

We would like to acknowledge Song Hyun Bae (@bshyuunn) and Lee Dong Ha (Who4mI) for their assistance.

DesktopServices

We would like to acknowledge an anonymous researcher for their assistance.

Files

We would like to acknowledge Chi Yuan Chang of ZUSO ART and taikosoup for their assistance.

Passwords

We would like to acknowledge Talal Haj Bakry and Tommy Mysk of Mysk Inc. @mysk_co for their assistance.

sips

We would like to acknowledge Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative for their assistance.

Static Linker

We would like to acknowledge Holger Fuhrmannek for their assistance.

VoiceOver

We would like to acknowledge Bistrit Dahal, Dalibor Milanovic for their assistance.

Similar Content Click

For more information contact XpertLab