Permissions Issue in macOS Products by Apple
CVE-2025-31243

7.8HIGH

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
30 July 2025

What is CVE-2025-31243?

A permissions vulnerability in selected Apple macOS products allows unauthorized applications to potentially gain root privileges, raised concerns regarding user security. This flaw has been addressed with additional restrictions in the latest updates, ensuring better protection for users. Affected systems include macOS Sonoma 14.7.7, Ventura 13.7.7, and Sequoia 15.6. Users are advised to update their systems to enhance security and mitigate potential risks.

Affected Version(s)

macOS < 15.6

macOS < 14.7

macOS < 13.7

References

https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124150
https://support.apple.com/en-us/124151

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.