CVE-2025-43253

This issue was addressed with improved input validation

Critical · published July 29, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

🚨 A malicious app could run any program it wants on your trusted Mac device! 🔥 Think of your Mac as a highly secure vault, and this vulnerability is like a sneaky thief who’s found a way to bypass the security measures to access the vault's contents without any alarms going off. If exploited, this vulnerability allows attackers to launch arbitrary binaries, which could lead to devastating breaches — imagine unwanted software running rampant, stealing your data or even taking control of your device! With a CVSS score of 9.8, this is critical and must be addressed immediately.

Put simply

Think of your Mac as a highly secure vault, and this vulnerability is like a sneaky thief who’s found a way to bypass the security measures to access the vault's contents without any alarms going off. The vulnerability stems from inadequate input validation, allowing malicious apps to execute unverified binaries on macOS devices. It's like letting a known troublemaker into your home without checking their ID — you never know what they're capable of!

What to do

If exploited, this vulnerability allows attackers to launch arbitrary binaries, which could lead to devastating breaches — imagine unwanted software running rampant, stealing your data or even taking control of your device! With a CVSS score of 9.8, this is critical and must be addressed immediately. To secure your system, update immediately to macOS Sequoia 15.6 or macOS Sonoma 14.7.7. Regularly audit applications you install to ensure they come from trusted sources, and keep an eye out for any suspicious behavior. You've got this! With these updates, you’ll keep your Mac safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Published
2025-07-29T23:35Z
EPSS history
Timeline
  • 29 JUL 23:35Z
    This issue was addressed with improved input validation
    cvelistv5