Product:
macOS
Summary
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to modify protected parts of the file system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43291 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the system and require user interaction. By leveraging the permissions issue, the attacker could potentially modify protected areas of the file system, leading to unauthorized access or manipulation of sensitive data.
Affected Products
- macOS Sequoia: The latest version addresses the permissions issue.
- macOS Sonoma: This version includes the fix for the vulnerability.
- macOS Tahoe: The vulnerability has been resolved in this release.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions, which include the necessary fixes. Regularly applying updates and patches is essential to protect against potential exploitation of vulnerabilities.