File Quarantine Bypass in macOS Products by Apple
CVE-2025-43332

5.2MEDIUM

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
15 September 2025

What is CVE-2025-43332?

A vulnerability exists in macOS products that allows an application to potentially bypass file quarantine measures, which are designed to prevent untrusted files from executing. This could enable an application to escape its sandboxed environment, posing a risk to system security. It is crucial for users to update to the latest versions, as Apple has implemented additional checks to address this issue in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.

Affected Version(s)

macOS < 14.8

macOS < 26

macOS < 15.7

References

https://support.apple.com/en-us/125112
https://support.apple.com/en-us/125110
https://support.apple.com/en-us/125111

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-43332 : File Quarantine Bypass in macOS Products by Apple