Product:
macOS
Summary
A configuration issue was addressed with additional restrictions. This issue allows an app to potentially trick a user into copying sensitive data to the pasteboard. The vulnerability has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2025-43310 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that tricks the user into copying sensitive information to the pasteboard. This could be achieved through social engineering techniques, where the user is misled into performing actions that result in the exposure of their data.
Affected Products
- macOS Sequoia 15.7: Fixed the configuration issue with additional restrictions.
- macOS Sonoma 14.8: Addressed the vulnerability to prevent sensitive data exposure.
- macOS Tahoe 26: Implemented measures to mitigate the risk of data being copied to the pasteboard.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS. Regularly updating the operating system will help protect against potential exploits and ensure that any security patches are applied.