Product:
macOS
Summary
A privacy issue was addressed by moving sensitive data. This issue allows an app to potentially access protected user data. The vulnerability has been fixed in macOS Sonoma 14.8 and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43367 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. They could then run a malicious application that takes advantage of the privacy issue to access sensitive user data without proper authorization. User interaction is required to execute the malicious application, making it necessary for the attacker to trick the user into running it.
Affected Products
- macOS Sonoma 14.8 – The latest version that addresses the privacy issue.
- macOS Tahoe 26 – Another version that includes the fix for the vulnerability.
Mitigation
To mitigate this issue, users should update their macOS to the latest version, which includes the necessary fixes to protect sensitive data. Regularly checking for updates and applying them promptly can help prevent exploitation of this and other vulnerabilities.