{"id":"CVE-2025-43336","state":"PUBLISHED","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may ","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information.","publishedAt":"2025-11-04T01:16:23.918Z","updatedAt":"2026-04-02T18:15:20.081Z","severity":{"score":4.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.1","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/125634","https://support.apple.com/en-us/125635","https://support.apple.com/en-us/125636"],"weaknesses":["CWE-863"],"ingestedAt":"2026-10-29T20:09:17.366Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/43xxx/CVE-2025-43336.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-43336","state":"PUBLISHED","datePublished":"2025-11-04T01:16:23.918Z","dateUpdated":"2026-04-02T18:15:20.081Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2025-04-16T15:24:37.109Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.1","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/125634"},{"url":"https://support.apple.com/en-us/125635"},{"url":"https://support.apple.com/en-us/125636"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app with root privileges may be able to access private information"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:15:20.081Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-11-04T19:09:52.692325Z","id":"CVE-2025-43336","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","type":"CWE","lang":"en","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-11-04T19:09:59.027Z"}}]}}}