Product:
macOS
Summary
This issue was addressed with additional entitlement checks. It is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26. An app may be able to access protected user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-43311 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a local system. The application could potentially bypass entitlement checks and gain unauthorized access to protected user data. This requires low complexity and no user interaction, making it easier for attackers to exploit.
Affected Products
- macOS Sequoia 15.7 – Fixed with additional entitlement checks to prevent unauthorized access to user data.
- macOS Sonoma 14.8 – Addressed the vulnerability to enhance user data protection.
- macOS Tahoe 26 – Updated to include security measures against this issue.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS. Regularly updating the operating system will help protect against potential exploits that target this issue.