MEDIUM Apple Inc. Vulnerability Alert

Product:

macOS Tahoe

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot.

Details

Severity Base Score CVE
MEDIUM 5.1 CVE-2025-43262

Exploitation

To exploit this vulnerability, an attacker with local access could connect unauthorized accessories during the boot process, potentially bypassing USB Restricted Mode. This could allow the attacker to access sensitive data or perform unauthorized actions on the device.

Affected Products

  • macOS Tahoe 26: The latest version that addresses the permissions issue related to USB Restricted Mode.

Mitigation

To mitigate this vulnerability, users should ensure they are running the latest version of macOS Tahoe. Additionally, users should avoid connecting unauthorized accessories during the boot process to prevent potential exploitation.

References