CVE-2025-43339

Analyzed Analyzed - Analysis Complete

macOS Tahoe Sandbox Bypass Leads to Data Exposure

Publication date: 2026-06-11

Last updated on: 2026-06-12

Assigner: Apple Inc.

Description

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-12

Generated

2026-07-02

AI Q&A

2026-06-12

EPSS Evaluated

2026-06-30

NVD

CVE-2025-43339

EUVD

EUVD-2025-210119

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 26.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability involves an access issue in macOS Tahoe that was addressed by adding additional sandbox restrictions. A malicious application could exploit this issue to gain access to sensitive user data.

Impact Analysis

The vulnerability can allow a malicious app to access sensitive user data without proper authorization, potentially compromising your privacy and security.

Mitigation Strategies

The vulnerability is fixed in macOS Tahoe 26.1 by adding additional sandbox restrictions to prevent malicious apps from accessing sensitive user data.

To mitigate this vulnerability immediately, you should update your system to macOS Tahoe 26.1 or later, which contains the fix.

Compliance Impact

The vulnerability allows a malicious app to potentially access sensitive user data due to an access issue that was addressed with additional sandbox restrictions in macOS Tahoe 26.1.

Unauthorized access to sensitive user data can have implications for compliance with common standards and regulations such as GDPR and HIPAA, which require protection of personal and sensitive information.

Therefore, before the fix, this vulnerability could have posed a risk to compliance by enabling unauthorized data access, but the issue has been addressed by Apple through sandbox restrictions.

Hi! I’m here to help you understand CVE-2025-43339. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70