CVE-2025-46315

Analyzed Analyzed - Analysis Complete

macOS Tahoe Permissions Issue Exposes User Data

Publication date: 2026-06-11

Last updated on: 2026-06-12

Assigner: Apple Inc.

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-12

Generated

2026-07-02

AI Q&A

2026-06-12

EPSS Evaluated

2026-06-30

NVD

CVE-2025-46315

EUVD

EUVD-2025-210117

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 26.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is a permissions issue in macOS Tahoe that was addressed by adding additional restrictions. It could allow an application to access protected user data without proper authorization.

Impact Analysis

The vulnerability could allow an unauthorized app to access sensitive user data, potentially leading to privacy breaches or exposure of confidential information.

Mitigation Strategies

To mitigate this vulnerability, update your system to macOS Tahoe version 26.1 or later, where the issue has been fixed with additional restrictions to prevent unauthorized access to protected user data.

Compliance Impact

This vulnerability allows an app to potentially access protected user data due to a permissions issue. Such unauthorized access to protected user data could impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls over access to personal and sensitive information.

However, the specific effects on compliance depend on the context of data usage and the mitigation measures applied, such as the fix introduced in macOS Tahoe 26.1 that adds additional restrictions to address the issue.

Hi! I’m here to help you understand CVE-2025-46315. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70