CVE-2025-43192

A configuration issue was addressed with additional restrictions

Critical · published July 29, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

🚨 A sneaky configuration issue could let attackers exploit account-driven user enrollment, even with Lockdown Mode on! 🔥 Imagine you locked up your valuables, but someone discovered a way to slip a hand under the door — that’s what this vulnerability allows. It's like having a hotel security system that fails to check if someone actually belongs in your room! An attacker could potentially enroll a device without proper authorization, gaining access to sensitive information or services. This could lead to a breach of privacy and a compromise of the entire system, resulting in absolutely devastating consequences for users.

Put simply

Imagine you locked up your valuables, but someone discovered a way to slip a hand under the door — that’s what this vulnerability allows. It's like having a hotel security system that fails to check if someone actually belongs in your room! This vulnerability arises from insufficient restrictions in the user enrollment process, which may allow unauthorized account access even when Lockdown Mode is enabled on macOS devices.

What to do

An attacker could potentially enroll a device without proper authorization, gaining access to sensitive information or services. This could lead to a breach of privacy and a compromise of the entire system, resulting in absolutely devastating consequences for users. To protect your system, ensure you update to macOS Sequoia 15.6 or macOS Sonoma 14.7.7 immediately. Review and tighten your security settings, especially around Lockdown Mode, to limit potential exploits. Regularly check system configurations to avoid similar issues in the future. You've got this! Stay vigilant and secure your devices like the true security hero you are! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00654 · 50.7th percentile
Published
2025-07-29T23:28Z
EPSS history
Timeline
  • 29 JUL 23:28Z
    A configuration issue was addressed with additional restrictions
    cvelistv5