Logic Issue in MacOS Sequoia by Apple
CVE-2025-43240

6.2MEDIUM

Key Information:

Vendor

Apple
Status
Safari
Mac OS
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43240?

A logic issue in macOS Sequoia was addressed by implementing improved checks to ensure the correct association of a download's origin. This could lead to unintended consequences if the origin is misrepresented, potentially impacting user security and trust. Affected users are encouraged to update to version 15.6, where this issue has been resolved.

Affected Version(s)

macOS < 15.6

Safari < 18.6

References

https://support.apple.com/en-us/124152
https://support.apple.com/en-us/124149

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.