CVE-2025-43198

This issue was addressed by removing the vulnerable code

Critical · published July 29, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

🚨 A careless code slip means an app could rummage through your protected user data! 🔥 Think of it like a hotel with an unguarded back entrance — while guests are safe, a sneaky intruder can waltz in and access any room without a key. 🏨 This vulnerability allows unauthorized apps to potentially access sensitive user information. If left unpatched, it’s like giving someone the master key to your digital life, with access to everything from private messages to banking info. Absolutely devastating!

Put simply

Think of it like a hotel with an unguarded back entrance — while guests are safe, a sneaky intruder can waltz in and access any room without a key. 🏨 The vulnerability was identified in macOS code that insufficiently restricted access to protected data for apps. By removing the vulnerable code, Apple has mitigated this risk in Sequoia 15.6 and Sonoma 14.7.7.

What to do

This vulnerability allows unauthorized apps to potentially access sensitive user information. If left unpatched, it’s like giving someone the master key to your digital life, with access to everything from private messages to banking info. Absolutely devastating! Update your macOS to Sequoia 15.6 or Sonoma 14.7.7 as soon as possible to close this critical security hole. Regularly check for updates to ensure you’re not leaving any doors ajar! You've got this! Follow these steps, and your digital fortress will be secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.6th percentile
Published
2025-07-29T23:35Z
EPSS history
Timeline
  • 29 JUL 23:35Z
    This issue was addressed by removing the vulnerable code
    cvelistv5