Product:
macOS Tahoe
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially access sensitive user data. The vulnerability has been fixed in the latest version of macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-43328 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that takes advantage of the permissions issue to access sensitive user data without proper authorization. The attack can be executed over a network, requiring low complexity and no user interaction, making it easier for attackers to target users.
Affected Products
- macOS Tahoe: The latest version addresses a permissions issue that could allow unauthorized access to sensitive user data.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS Tahoe, which includes the necessary security updates to address the permissions issue. Regularly updating software and being cautious about app permissions can further enhance security.