CVE-2025-43410Use of Cache Containing Sensitive Information in Apple Macos

Severity
2.4LOWNVD
EPSS
0.0%
top 93.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 12

Description

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 0.9 | Impact: 1.4

Affected Packages2 packages

CVEListV5apple/macos< 14.8.2+2
NVDapple/macos15.015.7.2+1

🔴Vulnerability Details

2
GHSA
GHSA-mvwp-xpr9-3mwj: The issue was addressed with improved handling of caches2025-12-12
CVEList
CVE-2025-43410: The issue was addressed with improved handling of caches2025-12-12

📋Vendor Advisories

4
Apple
CVE-2025-43410: macOS Tahoe 26.22025-12-12
Apple
CVE-2025-43410: macOS Sequoia 15.7.22025-11-03
Apple
CVE-2025-43410: macOS Sonoma 14.8.22025-11-03
Microsoft
Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no per2022-10-11

🕵️Threat Intelligence

1
Wiz
CVE-2025-43410 Impact, Exploitability, and Mitigation Steps | Wiz
CVE-2025-43410 — Apple Macos vulnerability | cvebase