CVE-2025-43273

A permissions issue was addressed with additional sandbox restrictions

Critical · published July 29, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

🚨 A sneaky permissions issue lets a sandboxed process break free like a magician escaping from handcuffs — and that's a showstopper! 🔥 Imagine a highly secure vault with an unexpected unlocked back door. This vulnerability allows a process to bypass sandbox restrictions, just like a clever thief sneaking past security by exploiting an unnoticed entry point. If an attacker successfully exploits this vulnerability, they could gain unauthorized access to sensitive resources, potentially leading to data theft or system compromise. This makes the risk absolutely devastating, as it could expose user data and system integrity to malicious actors. The stakes are high!

Put simply

Imagine a highly secure vault with an unexpected unlocked back door. This vulnerability allows a process to bypass sandbox restrictions, just like a clever thief sneaking past security by exploiting an unnoticed entry point. This vulnerability arises from improper permissions that allow a sandboxed process to evade restrictions meant to isolate it from the rest of the system. Essentially, it opens a loophole in the protective barriers intended for secure operations.

What to do

If an attacker successfully exploits this vulnerability, they could gain unauthorized access to sensitive resources, potentially leading to data theft or system compromise. This makes the risk absolutely devastating, as it could expose user data and system integrity to malicious actors. The stakes are high! Immediately update to macOS Sequoia 15.6 or macOS Sonoma 14.8 to close this loophole. Regularly review permissions and sandbox configurations to ensure they are robust against circumvention. Don't delay — this is critical! You've got this! By updating and tightening your security practices, you’re taking the right steps to keep your system safe. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00640 · 50.0th percentile
Published
2025-07-29T23:29Z
EPSS history
Timeline
  • 29 JUL 23:29Z
    A permissions issue was addressed with additional sandbox restrictions
    cvelistv5