Access Control Issue in macOS by Apple
CVE-2025-43270

8.8HIGH

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43270?

An access control issue was discovered in macOS, where an application may exploit insufficient sandbox restrictions to gain unauthorized access to local network resources. This vulnerability highlights the need for additional security measures to prevent unauthorized applications from interacting with sensitive network data. The issue has been addressed in the latest updates, specifically in macOS Sequoia 15.6, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7, making it essential for users to update their systems promptly.

Affected Version(s)

macOS < 15.6

macOS < 14.7

macOS < 13.7

References

https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124150
https://support.apple.com/en-us/124151

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.
CVE-2025-43270 : Access Control Issue in macOS by Apple