Security Vulnerability Report
中文
CVE-2025-43509 CVSS 5.5 MEDIUM

CVE-2025-43509

Published: 2025-12-12 21:15:56
Last Modified: 2026-04-02 19:20:57

Description

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.

CVSS Details

CVSS Score
5.5
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE
Apple macOS Sequoia < 15.7.3
Apple macOS Sonoma < 14.8.3
Apple macOS Tahoe < 26.2

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
// CVE-2025-43509 PoC Concept (Educational Purpose Only) // This PoC demonstrates the concept of exploiting data protection bypass // Note: Actual exploit requires specific macOS version and conditions /* import Foundation import Security class DataProtectionBypass { func attemptUnauthorizedAccess() -> Bool { // Vulnerable code pattern (before fix) // Bypassing proper authorization checks let sensitiveDataPath = "/Users/Shared/SensitiveUserData.db" let fileManager = FileManager.default // This should fail with proper authorization but bypassed before fix if fileManager.isReadableFile(atPath: sensitiveDataPath) { // Attempt to read sensitive data without proper permissions if let data = try? Data(contentsOf: URL(fileURLWithPath: sensitiveDataPath)) { print("Unauthorized access to sensitive data: \(data.count) bytes") return true } } return false } } // Mitigation: After fix, this access will be properly blocked // Solution: Update to macOS Sequoia 15.7.3, Sonoma 14.8.3, or Tahoe 26.2 */

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-43509", "sourceIdentifier": "[email protected]", "published": "2025-12-12T21:15:55.740", "lastModified": "2026-04-02T19:20:57.053", "vulnStatus": "Modified", "cveTags": [], "descriptions": [{"lang": "en", "value": "This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 3.6}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-200"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "14.0", "versionEndExcluding": "14.8.3", "matchCriteriaId": "E4928B54-3EBC-486A-915B-F20333B30466"}, {"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "15.0", "versionEndExcluding": "15.7.3", "matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D"}]}]}], "references": [{"url": "https://support.apple.com/en-us/125886", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}, {"url": "https://support.apple.com/en-us/125887", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}, {"url": "https://support.apple.com/en-us/125888", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}]}}