CVE-2025-43233

This issue was addressed with improved access restrictions

Critical · published July 29, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

🚨 A malicious app could masquerade as a trusted HTTPS proxy, gaining access to sensitive user data on your Mac! 🔥 Think of it like a sneaky waiter who not only takes your order but listens in on every conversation at your table, capturing your private discussions. This vulnerability allows an attacker to eavesdrop on your sensitive information as it travels through the network. If exploited, this vulnerability could allow an attacker to intercept and access confidential user data, including passwords and personal information, leaving users vulnerable to identity theft or unauthorized access to their accounts. The potential fallout is absolutely devastating!

Put simply

Think of it like a sneaky waiter who not only takes your order but listens in on every conversation at your table, capturing your private discussions. This vulnerability allows an attacker to eavesdrop on your sensitive information as it travels through the network. This vulnerability arises from insufficient access restrictions on certain services, allowing a malicious application acting as an HTTPS proxy to retrieve sensitive data.

What to do

If exploited, this vulnerability could allow an attacker to intercept and access confidential user data, including passwords and personal information, leaving users vulnerable to identity theft or unauthorized access to their accounts. The potential fallout is absolutely devastating! Update your Mac immediately to the fixed versions: macOS Sequoia 15.6, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7. Ensure that your security settings are configured to block untrusted network connections. Regularly audit installed applications to prevent unverified software from gaining access. You've got this! Update your system, and you’ll be well on your way to keeping your data safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00733 · 53.8th percentile
Published
2025-07-29T23:54Z
EPSS history
Timeline
  • 29 JUL 23:54Z
    This issue was addressed with improved access restrictions
    cvelistv5