Product:
macOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially access protected user data. The problem has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-31268 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. They could create or manipulate an application to gain unauthorized access to protected user data. User interaction is required, as the app must be executed by the user for the exploit to succeed.
Affected Products
- macOS Sequoia 15.7: Fixed permissions issue that could allow unauthorized access to user data.
- macOS Sonoma 14.8: Addressed vulnerabilities related to app permissions and user data protection.
- macOS Tahoe 26: Implemented additional restrictions to prevent unauthorized data access.
Mitigation
To mitigate this issue, users should update their macOS to the latest versions as specified. Regularly updating software can help protect against vulnerabilities and ensure that security measures are in place.