Product:
macOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially access protected user data. The problem has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43285 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. They could create or modify an application that takes advantage of the permissions issue to access protected user data without proper authorization. User interaction is required, as the victim must run the malicious application.
Affected Products
- macOS Sequoia 15.7: Fixed the permissions issue to prevent unauthorized access to user data.
- macOS Sonoma 14.8: Addressed the vulnerability with additional restrictions on app permissions.
- macOS Tahoe 26: Implemented security measures to protect user data from unauthorized access.
Mitigation
To mitigate this issue, users should update their macOS to the latest versions as specified. Regularly applying security updates and being cautious about the applications installed on the system can help prevent exploitation of similar vulnerabilities in the future.