CVE-2025-43318CWE-862broken-access-control

CVE-2025-43318

Medium · published September 16, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
9.4
In the wild
Unconfirmed
What it is

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe 26. An app with root privileges may be able to access private information.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-09-16T03:15Z
Affected products (1)
ProductVersionsFixed in
apple/macos< 26.026.0
References (2)
https://support.apple.com/en-us/125110 · [email protected]http://seclists.org/fulldisclosure/2025/Sep/53 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 15 SEP 22:35Z
    This issue was addressed with additional entitlement checks
    cvelistv5