{"id":"CVE-2025-43410","state":"PUBLISHED","title":"The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may b","description":"The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes.","publishedAt":"2025-12-12T20:57:00.378Z","updatedAt":"2026-04-02T18:25:54.548Z","severity":{"score":2.4,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.2","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/125635","https://support.apple.com/en-us/125636","https://support.apple.com/en-us/125886"],"weaknesses":["CWE-524"],"ingestedAt":"2026-10-29T20:09:17.366Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/43xxx/CVE-2025-43410.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-43410","state":"PUBLISHED","datePublished":"2025-12-12T20:57:00.378Z","dateUpdated":"2026-04-02T18:25:54.548Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2025-04-16T15:24:37.121Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.2","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/125635"},{"url":"https://support.apple.com/en-us/125636"},{"url":"https://support.apple.com/en-us/125886"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An attacker with physical access may be able to view deleted notes"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:25:54.548Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":2.4,"attackVector":"PHYSICAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-12-13T22:50:30.345155Z","id":"CVE-2025-43410","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-524","type":"CWE","lang":"en","description":"CWE-524 Use of Cache Containing Sensitive Information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-13T22:50:34.042Z"}}]}}}