Access Issue in Apple Products due to Insufficient Sandbox Restrictions

CVE-2025-43413

What is CVE-2025-43413?

An access control vulnerability was identified in Apple’s operating systems, allowing a sandboxed application the potential to observe system-wide network connections. This issue stems from inadequate restrictions placed on sandboxing protocols, which should isolate apps from system resources. Apple has addressed this concern in the following versions: visionOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, watchOS 26.1, iOS 26.1, iPadOS 26.1, and tvOS 26.1. Users are encouraged to update to these versions to enhance their system security against potential exploits.

References