CVEvulnerability
CVE-2025-43307
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-09-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-863
Description
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.
Affected configurations
• apple macos (< 26.0)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://support.apple.com/en-us/125110 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Sep/53 seclists.org