Product:
macOS, iOS, iPadOS
Summary
A permissions issue was addressed with additional sandbox restrictions. A shortcut may be able to bypass these sandbox restrictions. This issue affects multiple versions of macOS and iOS products.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-43358 |
Exploitation
An attacker can exploit this vulnerability by creating a malicious shortcut that bypasses the sandbox restrictions. This can allow unauthorized access to sensitive data or system resources. The attack requires local access to the device, making it a low-complexity attack.
Affected Products
- macOS Sequoia 15.7 – Affected by sandbox restriction bypass.
- macOS Sonoma 14.8 – Vulnerable to permissions issues.
- iOS 18.7 – May allow shortcuts to bypass security measures.
- iPadOS 18.7 – Similar vulnerabilities as iOS.
- macOS Tahoe 26 – Affected by the same permissions issue.
- iOS 26 – Vulnerable to sandbox bypass.
- iPadOS 26 – May allow exploitation through shortcuts.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of macOS, iOS, and iPadOS where the issue has been addressed. Regularly applying security updates is crucial to protect against such vulnerabilities.