CVEvulnerability
CVE-2025-46281
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2025-12-17
- Last modified
- 2026-08-21
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-693
Description
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to break out of its sandbox.
Affected configurations
• apple macos (< 26.2)
Related
Weakness · CWE (1)
- CWE-693 Protection Mechanism Failure weakness
References
- https://support.apple.com/en-us/125886 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/126349 support.apple.com
- https://support.apple.com/en-us/126350 support.apple.com