Product:
macOS Tahoe
Summary
This issue was addressed with additional entitlement checks. An app with root privileges may be able to access private information. The vulnerability has been fixed in the latest version of macOS Tahoe.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2025-43318 |
Exploitation
To exploit this vulnerability, an attacker would need to gain root privileges on the affected system. Once these privileges are obtained, the attacker could potentially access sensitive private information that should be protected, leading to unauthorized data exposure.
Affected Products
- macOS Tahoe: The latest version addresses the vulnerability with additional entitlement checks to prevent unauthorized access to private information.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS Tahoe, which includes the necessary fixes. Regularly updating software and monitoring for unauthorized access can also help protect against potential exploitation.