Product:
watchOS, tvOS, macOS Tahoe, iOS, iPadOS
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26, tvOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to break out of its sandbox.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-43329 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The app could potentially escape its sandbox environment, allowing it to access restricted resources and data. This could lead to unauthorized actions and data breaches.
Affected Products
- watchOS 26: Fixed permissions issue that could allow apps to escape sandbox.
- tvOS 26: Addressed vulnerabilities related to app permissions.
- macOS Tahoe 26: Resolved sandbox escape issue for applications.
- iOS 26: Mitigated risks of apps breaking out of their sandbox.
- iPadOS 26: Fixed permissions vulnerabilities affecting app security.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of watchOS, tvOS, macOS Tahoe, iOS, and iPadOS. Regularly applying security updates is crucial to protect against potential exploits and ensure that applications operate within their intended permissions.