Product:
macOS
Summary
A race condition was addressed with improved state handling. This issue allows an app to potentially gain root privileges. The vulnerability has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7 | CVE-2025-43304 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable version of macOS. Due to the race condition, the application could manipulate system states to escalate privileges, allowing it to execute commands with root access. This requires local access to the system, making it critical for users to ensure their systems are updated.
Affected Products
- macOS Sequoia 15.7 – Fixed the race condition issue.
- macOS Sonoma 14.8 – Addressed the vulnerability with improved state handling.
- macOS Tahoe 26 – Resolved the potential for apps to gain root privileges.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions as soon as possible. Regularly applying security updates will help protect against potential exploitation of this and other vulnerabilities.