CVE-2025-43524

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. An app may be able to break out of its sandbox.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://support.apple.com/en-us/125886	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

History

14 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Se abordó un problema de acceso con restricciones de sandbox adicionales. Este problema está solucionado en macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. Una aplicación podría escapar de su sandbox.

Information

Published : 2026-05-12 18:16

Updated : 2026-10-14 13:10

NVD link : CVE-2025-43524

Mitre link : CVE-2025-43524

CVE.ORG link : CVE-2025-43524

JSON object : View

Products Affected

apple

macos

CWE

CWE-284

Improper Access Control

{"id": "CVE-2025-43524", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43524", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-12T20:27:03.098026Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "macOS Sequoia", "versions": [{"status": "affected", "version": "0", "lessThan": "15.7.7", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS Sonoma", "versions": [{"status": "affected", "version": "0", "lessThan": "14.8.7", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS Tahoe", "versions": [{"status": "affected", "version": "0", "lessThan": "26.2", "versionType": "custom"}]}]}], "published": "2026-05-12T18:16:35.007", "references": [{"url": "https://support.apple.com/en-us/125886", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. An app may be able to break out of its sandbox."}, {"lang": "es", "value": "Se abord\u00f3 un problema de acceso con restricciones de sandbox adicionales. Este problema est\u00e1 solucionado en macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. Una aplicaci\u00f3n podr\u00eda escapar de su sandbox."}], "lastModified": "2026-10-14T13:10:00.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD9E7FAE-30DA-4B2B-A63A-6DFEA7A29933", "versionEndExcluding": "14.8.7", "versionStartIncluding": "14.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2984C440-3DC2-413A-B5FA-1FAB21078DB8", "versionEndExcluding": "15.7.7", "versionStartIncluding": "15.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "825BB848-93B2-4A3E-86D8-16CB37DF9302", "versionEndExcluding": "26.2", "versionStartIncluding": "26.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}