CVE-2025-43469 — Exposure of Private Personal Information to an Unauthorized Actor in Apple Macos

CWE-359 — Exposure of Private Personal Information to an Unauthorized Actor6 documents4 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 98.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos

Timeline

PublishedNov 4

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5apple/macos< 14.8.2+2

▶NVDapple/macos14.0 — 14.8.2+1

🔴Vulnerability Details

GHSA

GHSA-3rjw-h7x9-663w: A permissions issue was addressed with additional restrictions↗2025-11-04

▶

CVEList

CVE-2025-43469: A permissions issue was addressed with additional restrictions↗2025-11-04

▶

📋Vendor Advisories

Apple

CVE-2025-43469: macOS Tahoe 26.1↗2025-11-03

▶

Apple

CVE-2025-43469: macOS Sonoma 14.8.2↗2025-11-03

▶

Apple

CVE-2025-43469: macOS Sequoia 15.7.2↗2025-11-03

▶