CVE-2025-43243

A permissions issue was addressed with additional restrictions

Critical · published July 29, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

🚨 A permissions blunder is letting apps peek into secret areas of your system! 🔥 Think of your file system as a high-security vault, with certain rooms off-limits. This vulnerability is like giving a rogue janitor a master key, allowing them to access confidential information hidden behind secure doors. If exploited, an attacker could modify critical sections of your file system, potentially leading to system instability, unauthorized data changes, or even full compromise of your machine. Imagine the chaos if confidential files were altered without your knowledge!

Put simply

Think of your file system as a high-security vault, with certain rooms off-limits. This vulnerability is like giving a rogue janitor a master key, allowing them to access confidential information hidden behind secure doors. This critical permissions issue allows apps to modify protected areas of the file system, which should remain strictly off-limits. The flaw exists due to inadequate restrictions that have now been addressed in the latest updates.

What to do

If exploited, an attacker could modify critical sections of your file system, potentially leading to system instability, unauthorized data changes, or even full compromise of your machine. Imagine the chaos if confidential files were altered without your knowledge! Immediately update your macOS to versions Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7. Regularly audit your applications for any that may exploit this vulnerability and ensure they’re updated as well! You've got this, security hero! Lock down your system with these updates and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00733 · 53.8th percentile
Published
2025-07-29T23:29Z
EPSS history
Timeline
  • 29 JUL 23:29Z
    A permissions issue was addressed with additional restrictions
    cvelistv5