Product:
macOS Sonoma
Summary
A logic issue was addressed with improved checks. This issue allows an app to potentially access user-sensitive data. The vulnerability has been fixed in macOS Sonoma 14.8.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43231 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the system and trick the user into interacting with a malicious application. This could involve social engineering tactics to convince the user to run the app, which could then access sensitive data without proper authorization.
Affected Products
- macOS Sonoma: The latest version of macOS that includes the fix for the logic issue.
Mitigation
Users are advised to update to macOS Sonoma 14.8 to mitigate this vulnerability. Regularly updating software and being cautious about the applications installed can help protect against similar issues in the future.