CVE-2025-43512

published 2025-12-12

CVE-2025-43512: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe…

Priority P2 78 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

ITW VulnCheck KEV

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to elevate privileges.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
apple	ios_18.7.3_and_ipados	—	—
apple	ios_and_ipados	< 18.7.3	18.7.3
apple	macos	< 15.7.3	15.7.3
apple	macos	< 26.2	26.2
apple	macos	< 14.8.3	14.8.3
apple	macos	>= 15.0 < 15.7.3	15.7.3
apple	macos_sequoia	—	—
apple	macos_sonoma	—	—
apple	macos_tahoe	—	—

Detection & IOCs extracted from sources · hover to see the quote

• → CVE-2025-43512 is a kernel-level privilege escalation vulnerability (logic issue) affecting Apple platforms. Detection should focus on anomalous privilege escalation from user-space apps targeting the kernel component on macOS/iOS/iPadOS. ↗
• → The vulnerable component is the Kernel on macOS Sequoia, macOS Sonoma, macOS Tahoe, iOS, and iPadOS. Monitor for unexpected kernel privilege changes or unusual entitlement usage by apps on unpatched systems. ↗

• · No technical details, PoC, or exploitation indicators have been publicly disclosed for this CVE. All sources are Apple security advisories with minimal detail. No hashes, network IOCs, or behavioral signatures are available at this time. ↗

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vulncheck 7.8 HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269