Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

macOS Tahoe: App Can Bypass Gatekeeper Protection

CVE-2025-43296 · published 1 year ago
Summary

This issue allowed malicious apps to bypass security checks on macOS Tahoe 26. This means an app could potentially install itself without warning, even if it's not from a trusted source. macOS users on version 26 should update to the latest version to fix this issue.

What to do
  • Update apple macos to version 26.0 or later.
Affected software
VendorProductAffected versions
apple macos < 26.0
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Original advisory text
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-352Cross-Site Request Forgery (CSRF)
CWE-693Protection Mechanism Failure
CWE-703Improper Check or Handling of Exceptional Conditions
Timeline
Published9 Oct 2025
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-43296 · NVD
Track software like this
Free during beta