CVE-2025-31272

Analyzed Analyzed - Analysis Complete

macOS Sequoia Privilege Escalation via Launch Constraints Bypass

Publication date: 2026-06-11

Last updated on: 2026-06-12

Assigner: Apple Inc.

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-12

Generated

2026-07-02

AI Q&A

2026-06-11

EPSS Evaluated

2026-06-30

NVD

CVE-2025-31272

EUVD

EUVD-2025-210116

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 15.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability allows an app to bypass launch constraint protections on macOS Sequoia 15.4, potentially enabling the app to execute malicious code with elevated privileges.

Impact Analysis

If exploited, this vulnerability could allow malicious applications to run code with elevated privileges, which may lead to unauthorized access, data compromise, or system control.

Mitigation Strategies

To mitigate this vulnerability, update your system to macOS Sequoia 15.4 or later, where the issue has been fixed with improved checks to prevent apps from bypassing launch constraint protections and executing malicious code with elevated privileges.

Hi! I’m here to help you understand CVE-2025-31272. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70