Product:
macOS
Summary
This issue was addressed with improved entitlements. An app may be able to access user-sensitive data. The issue is fixed in macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43207 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system and would require user interaction. By leveraging the flaw in entitlements, the attacker could potentially access sensitive user data without proper authorization.
Affected Products
- macOS Tahoe 26: The latest version that addresses the vulnerability.
Mitigation
To mitigate this issue, users should ensure they are running the latest version of macOS, which includes the necessary security updates to prevent unauthorized access to sensitive data.