Product:
macOS
Summary
This issue was addressed by removing the vulnerable code. An app may be able to access protected user data. The issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43319 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. They could then run a malicious application that takes advantage of the vulnerable code to access protected user data without proper authorization.
Affected Products
- macOS Sequoia 15.7 – Fixed the vulnerability by removing the problematic code.
- macOS Sonoma 14.8 – Addressed the issue to prevent unauthorized access to user data.
- macOS Tahoe 26 – Implemented a fix to secure protected user data from potential exploitation.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest version as specified. Regularly applying security updates and patches is essential to protect against potential exploits.