Product:
macOS
Summary
The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to access sensitive user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43293 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. By leveraging the app’s ability to access sensitive user data, the attacker could potentially extract confidential information without the user’s consent. User interaction is required, making social engineering tactics a possible vector for exploitation.
Affected Products
- macOS Sequoia: A version of macOS that includes various improvements and features.
- macOS Sonoma: Another version of macOS with enhanced security and performance.
- macOS Tahoe: The latest iteration of macOS that addresses this vulnerability.
Mitigation
To mitigate this issue, users should update their macOS to the latest versions as specified. Regularly applying security updates and patches is crucial to protect against vulnerabilities. Users should also be cautious about granting permissions to applications that request access to sensitive data.