CVE-2025-43527
BaseFortify
Publication date: 2025-12-12
Last updated on: 2026-04-02
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | macos | to 15.7.3 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-280 | The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
Update your system to macOS Sequoia 15.7.3 or later, as this version contains the fix for the vulnerability that could allow an app to gain root privileges.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an application to gain root privileges, potentially giving it full control over the affected system, which could lead to unauthorized access, data modification, or system compromise.
Can you explain this vulnerability to me?
This vulnerability is a permissions issue in macOS Sequoia that could allow an application to gain root privileges. It was addressed by adding additional restrictions to prevent unauthorized privilege escalation.