Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-43396: MacOS and iOS Apps May Access Sensitive User Data

CVE-2025-43396 · published 1 year ago

Summary

A fix has been released for macOS and iOS apps that could potentially access your personal information. This issue has been addressed in the latest updates for macOS Sequoia, Tahoe, and Sonoma, so it's essential to update your operating system to the latest version to ensure your data remains secure.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
apple	macos	>= 14.0, < 14.8.2 >= 15.0, < 15.7.2 `cpe:2.3:o:apple:macos::::::::`

Original advisory text

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A sandboxed app may be able to access sensitive user data.

References

https://support.apple.com/en-us/125634
https://support.apple.com/en-us/125635 Release Notes Vendor Advisory
https://support.apple.com/en-us/125636 Release Notes Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-284Improper Access Control

Timeline

Published4 Nov 2025

Updated29 Oct 2026

First seen7 Mar 2026

Sources

CVE-2025-43396 · NVD

Track software like this

Free during beta