Product:
macOS
Summary
A race condition was addressed with improved state handling. This issue may allow an app to access sensitive user data. The problem has been fixed in macOS Sequoia 15.7 and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43292 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system and could potentially run a malicious application that takes advantage of the race condition. This could lead to unauthorized access to sensitive user data, as the application may not properly handle state changes.
Affected Products
- macOS Sequoia 15.7: Fixed the race condition issue to prevent unauthorized access to sensitive data.
- macOS Tahoe 26: Addressed the vulnerability with improved state handling.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions, Sequoia 15.7 or Tahoe 26, which include the necessary fixes. Regularly applying updates and patches is essential to protect against such vulnerabilities.