CVE-2025-43467

CVE-2025-43467

High · published December 13, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

⚡ An app could score root privileges with just a sneaky exploit in macOS! Think of it like a hotel where a guest finds an unguarded staff door. With a quick nudge, they can access restricted areas that should be off-limits, roaming freely where they shouldn't be. If exploited, this vulnerability could allow an attacker to gain full control over the system. Imagine them able to install malware, steal sensitive data, or even create new user accounts — absolutely devastating for your privacy and security!

Put simply

Think of it like a hotel where a guest finds an unguarded staff door. With a quick nudge, they can access restricted areas that should be off-limits, roaming freely where they shouldn't be. CVE-2025-43467 involves insufficient privilege checks, allowing unauthorized applications to escalate their privileges to root level. This weakness was recently addressed in macOS Tahoe 26.1 to prevent such exploitation.

What to do

If exploited, this vulnerability could allow an attacker to gain full control over the system. Imagine them able to install malware, steal sensitive data, or even create new user accounts — absolutely devastating for your privacy and security! Update your macOS to version 26.1 immediately to close this loophole. It's crucial to regularly check for security patches and stay updated to protect your system from potential threats. You've got this! Keeping your system updated is the best way to stay secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Published
2025-12-13T02:15Z
Affected products (1)
ProductVersionsFixed in
apple/macos< 26.126.1
References (1)
EPSS history
Timeline
  • 12 DEC 20:57Z
    This issue was addressed with improved checks
    cvelistv5