Product:
macOS
Summary
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to break out of its sandbox, leading to potential security vulnerabilities.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-43524 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application that can bypass the sandbox restrictions. Given the low attack complexity and local attack vector, an attacker with local access could potentially execute code outside the intended sandbox environment, compromising system integrity and confidentiality.
Affected Products
- macOS Sequoia: Fixed in version 15.7.7
- macOS Sonoma: Fixed in version 14.8.7
- macOS Tahoe: Fixed in version 26.2
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions as specified. Regularly applying security updates and patches is crucial to protect against potential exploits that could arise from this access issue.