Product:
macOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows a malicious app to potentially gain root privileges. The vulnerability has been fixed in macOS Tahoe 26 and visionOS 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43316 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable system. Given the low attack complexity and local attack vector, the attacker could gain root privileges without requiring user interaction, leading to significant impacts on confidentiality, integrity, and availability.
Affected Products
- macOS Tahoe 26: The latest version addressing the permissions issue.
- visionOS 26: Also includes the fix for the vulnerability.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest versions of macOS and visionOS. Regularly updating software and avoiding the installation of untrusted applications can help protect against potential exploitation.