CVE-2025-43405CWE-359

CVE-2025-43405

High · published November 4, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

⚡ A sneaky permissions issue allows apps to potentially access your sensitive data! This could be a real privacy headache if left unaddressed. 🔥 Think of it like an employee who has a badge to enter one room but finds a way to slip into the secure vault next door. That’s what’s happening here—an app might get into places it shouldn’t! If this vulnerability is exploited, an attacker could gain access to personal information, making your data privacy as fragile as a thin glass ornament. Imagine if your private messages or financial details were suddenly in the wrong hands—that's the risk we're talking about!

Put simply

Think of it like an employee who has a badge to enter one room but finds a way to slip into the secure vault next door. That’s what’s happening here—an app might get into places it shouldn’t! This vulnerability arises from inadequate sandbox restrictions, which allows untrusted applications to bypass security and access user-sensitive data. It’s like having a window that doesn't quite seal shut in a high-security building.

What to do

If this vulnerability is exploited, an attacker could gain access to personal information, making your data privacy as fragile as a thin glass ornament. Imagine if your private messages or financial details were suddenly in the wrong hands—that's the risk we're talking about! To safeguard your data, update your macOS to Sequoia 15.7.2, Sonoma 14.8.2, or Tahoe 26.1 immediately. Regularly check for updates and ensure app permissions are reviewed continuously to maintain a strong security posture. 🛡️ You've got this! With these updates, you'll have your defenses bolstered in no time. Keep being vigilant! 💪

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00591 · 47.5th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2025-11-04T07:15Z
Affected products (2)
ProductVersionsFixed in
apple/macos≥ 14.0, < 14.8.214.8.2
apple/macos≥ 15.0, < 15.7.215.7.2
References (3)
EPSS history
Timeline
  • 04 NOV 01:15Z
    A permissions issue was addressed with additional sandbox restrictions
    cvelistv5