BaseFortify

Publication date: 2025-10-15

Last updated on: 2026-02-26

Assigner: Apple Inc.

Description

The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be able to elevate their privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-15

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2025-10-15

EPSS Evaluated

2026-07-05

NVD

CVE-2025-43281

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 15.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Impact Analysis

If exploited, this vulnerability could allow a local attacker to gain higher privileges than intended, potentially leading to unauthorized access or control over system resources.

Executive Summary

This vulnerability involves an issue with authentication that could allow a local attacker to elevate their privileges on the affected system. It has been addressed and fixed in macOS Sequoia 15.6 by improving authentication mechanisms.

Mitigation Strategies

Update your system to macOS Sequoia 15.6 or later, as the issue is fixed in this version with improved authentication to prevent local privilege escalation.

Hi! I’m here to help you understand CVE-2025-43281. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70