CVE-2025-43232

A permissions issue was addressed with additional restrictions

Critical · published July 29, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

🚨 A permissions loophole is giving apps the green light to sidestep your Privacy preferences! 🔥 Think of it like a guest at a party sneaking into the VIP area without an invite — their access could lead to some serious privacy breaches for everyone! This vulnerability allows an application to bypass critical privacy settings, potentially exposing sensitive user data. Imagine an app having access to your camera or location without your knowledge — an absolute invasion of privacy that could compromise your personal information and safety!

Put simply

Think of it like a guest at a party sneaking into the VIP area without an invite — their access could lead to some serious privacy breaches for everyone! The issue arises from insufficient restrictions that fail to enforce privacy preferences properly, which can let unauthorized apps access protected resources.

What to do

This vulnerability allows an application to bypass critical privacy settings, potentially exposing sensitive user data. Imagine an app having access to your camera or location without your knowledge — an absolute invasion of privacy that could compromise your personal information and safety! Update to macOS Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7 immediately to close this dangerous gap. Regularly review app permissions to ensure nothing has slipped under the radar! You've got this! With these updates, you'll bolster your security and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Published
2025-07-29T23:35Z
EPSS history
Timeline
  • 29 JUL 23:35Z
    A permissions issue was addressed with additional restrictions
    cvelistv5