Product:
macOS
Summary
This issue was addressed by removing the vulnerable code. It is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to access user-sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43315 |
Exploitation
To exploit this vulnerability, an attacker would need local access to the system and require user interaction. By leveraging the vulnerable code, the attacker could potentially access sensitive user data without proper authorization.
Affected Products
- macOS Sequoia: Fixed in version 15.7, addresses the vulnerability by removing the problematic code.
- macOS Sonoma: Fixed in version 14.8, resolves the issue to protect user-sensitive data.
- macOS Tahoe: Fixed in version 26, eliminates the vulnerability to enhance security.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates is essential to protect against potential exploits.