Product:
macOS
Summary
An issue existed in the handling of environment variables. This issue was addressed with improved validation. An app may be able to access sensitive user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-43294 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious application that manipulates environment variables to gain unauthorized access to sensitive user data. By leveraging the low attack complexity and network attack vector, the attacker could deploy this application in a way that targets users without requiring any interaction.
Affected Products
- macOS Tahoe 26: The latest version that addresses the vulnerability.
Mitigation
To mitigate this issue, users should ensure they are running the latest version of macOS, which includes the necessary security updates to prevent unauthorized access to sensitive data through environment variables.