Product:
macOS
Summary
This issue was addressed by removing the vulnerable code. An app may be able to break out of its sandbox, which poses a significant security risk. The issue has been fixed in macOS Sequoia 15.7 and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.2 | CVE-2025-43330 |
Exploitation
To exploit this vulnerability, an attacker would need to craft a malicious application that can bypass the sandbox restrictions. This could allow the application to access sensitive data or perform unauthorized actions on the system. User interaction is required to execute the malicious app, making social engineering tactics a potential vector for exploitation.
Affected Products
- macOS Sequoia 15.7: Fixed the vulnerability by removing the problematic code.
- macOS Tahoe 26: Also addressed the issue to prevent sandbox breakout.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions, Sequoia 15.7 or Tahoe 26. Regularly applying security updates and being cautious about the applications installed can help reduce the risk of exploitation.