Permissions Issue in macOS Products by Apple
CVE-2025-43266

5.1MEDIUM

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43266?

A permissions-related vulnerability has been identified that potentially enables applications to escape their designated sandbox environment. This flaw was recently addressed by Apple with the implementation of additional restrictions in macOS Sequoia 15.6, Sonoma 14.7.7, and Ventura 13.7.7. Users and administrators are advised to update their systems promptly to mitigate any risks associated with this issue.

Affected Version(s)

macOS < 15.6

macOS < 14.7

macOS < 13.7

References

https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124150
https://support.apple.com/en-us/124151

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-43266 : Permissions Issue in macOS Products by Apple