CVE-2025-43506CWE-843

CVE-2025-43506

High · published December 13, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

⚡ Got multiple users logged into your macOS? That might just keep iCloud Private Relay from activating! Think of it like a crowded restaurant where only one patron can order at a time — if too many diners are trying to place their orders, some may get left out of the fun! If iCloud Private Relay doesn’t activate, your data privacy could take a hit when multiple users are logged in simultaneously. This means sensitive information might not be as protected as you think, leaving your digital presence vulnerable. Yikes!

Put simply

Think of it like a crowded restaurant where only one patron can order at a time — if too many diners are trying to place their orders, some may get left out of the fun! This logic error occurs when iCloud Private Relay fails to activate correctly with multiple simultaneous user logins, leading to potential lapses in privacy protection.

What to do

If iCloud Private Relay doesn’t activate, your data privacy could take a hit when multiple users are logged in simultaneously. This means sensitive information might not be as protected as you think, leaving your digital presence vulnerable. Yikes! Upgrade to macOS Tahoe 26.1 to fix this issue and ensure that iCloud Private Relay is always working as intended, even with multiple users. It's a good idea to keep all your devices updated to ensure maximum protection! You've got this! Just follow these steps, and you'll have your privacy shield up and running smoothly in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.5th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2025-12-13T02:15Z
Affected products (1)
ProductVersionsFixed in
apple/macos< 26.126.1
References (1)
EPSS history
Timeline
  • 12 DEC 20:56Z
    A logic error was addressed with improved error handling
    cvelistv5