Product:
macOS
Summary
A logic issue was addressed with improved checks. This issue allows a malicious app to potentially access private information. The problem has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43305 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that can be executed on the target system. Once the app is run, it may leverage the logic issue to gain unauthorized access to private information stored on the device. User interaction is required to execute the malicious app, making social engineering tactics a potential vector for exploitation.
Affected Products
- macOS Sequoia 15.7: Fixed the logic issue that allowed unauthorized access to private information.
- macOS Sonoma 14.8: Addressed the vulnerability with improved checks to prevent exploitation.
- macOS Tahoe 26: Resolved the issue to enhance user privacy and security.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions, specifically Sequoia 15.7, Sonoma 14.8, or Tahoe 26. Regularly updating software and being cautious about the applications installed on the system can help prevent exploitation of similar vulnerabilities in the future.