CVE-2025-43472CWE-20

CVE-2025-43472

High · published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

⚡ A sneaky validation issue could let an app gain root privileges — and that's never a good thing! 🔥 Think of it like a restaurant with a careless chef who doesn’t check the ingredients before serving meals. If a cook can bypass quality control, they might just serve whatever they want, including something dangerous! An attacker could exploit this vulnerability to gain full control of your system. This means they could install malware, steal sensitive data, and wreak havoc on your machine, making it an absolute nightmare!

Put simply

Think of it like a restaurant with a careless chef who doesn’t check the ingredients before serving meals. If a cook can bypass quality control, they might just serve whatever they want, including something dangerous! This vulnerability arises from insufficient input sanitization, allowing an application to execute commands with elevated privileges that it shouldn't normally have access to.

What to do

An attacker could exploit this vulnerability to gain full control of your system. This means they could install malware, steal sensitive data, and wreak havoc on your machine, making it an absolute nightmare! Update immediately to macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, or macOS Tahoe 26.1 to patch this issue. Regularly review permissions for applications and ensure you're keeping an eye on software updates. 🛡️ You’ve got this! Following these steps will help keep your system safe and sound! 🚀

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-11-04T07:15Z
Affected products (2)
ProductVersionsFixed in
apple/macos< 14.8.214.8.2
apple/macos≥ 15.0, < 15.7.215.7.2
References (3)
EPSS history
Timeline
  • 04 NOV 01:15Z
    A validation issue was addressed with improved input sanitization
    cvelistv5