Product:
macOS
Summary
The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to access protected user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43321 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to an affected Intel Mac. They could potentially launch unsigned services that may allow unauthorized access to protected user data, requiring user interaction to execute the attack.
Affected Products
- macOS Sequoia: A version of macOS that includes security enhancements to prevent unsigned services from launching.
- macOS Sonoma: Another version of macOS that addresses this vulnerability by blocking unsigned services.
- macOS Tahoe: This version also includes fixes for the issue related to unsigned services.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS that includes the necessary security updates. Regularly updating the operating system will help protect against potential exploitation of this issue.