CVE-2025-43367
BaseFortify
Publication date: 2025-09-15
Last updated on: 2026-04-02
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | macos | From 14.0 (inc) to 14.8 (exc) |
| apple | macos | From 15.0 (inc) to 26.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a privacy issue in macOS where an app may be able to access protected user data. The issue was addressed by moving sensitive data to prevent unauthorized access. It is fixed in macOS Sonoma 14.8 and macOS Tahoe 26.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an app to access sensitive user data without authorization, potentially compromising your privacy and security.
What immediate steps should I take to mitigate this vulnerability?
Update your system to macOS Sonoma 14.8 or macOS Tahoe 26, as these versions include the fix for this vulnerability by moving sensitive data to prevent unauthorized app access.