Product:
macOS Tahoe
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-31270 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. By running a malicious application, the attacker could potentially gain unauthorized access to protected user data due to the permissions issue. User interaction is required, making it necessary for the victim to execute the malicious application.
Affected Products
- macOS Tahoe 26: Fixed the permissions issue that allowed apps to access protected user data.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS Tahoe. Regularly updating the operating system will help protect against this and other vulnerabilities. Additionally, users should be cautious about the applications they install and run on their systems.