CVE-2025-43339
5.5 MEDIUMAn access issue was addressed with additional sandbox restrictions
Published: 2026-06-11 · Last updated: 2026-06-12
Severity and scoring
- CVSS
- 5.5 MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CWE
- CWE-284
Affected products
| Vendor | Product |
|---|---|
| apple | macos |
Description
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data.
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2025-43339
- [Vendor advisory]https://support.apple.com/en-us/125634
Related CVEs
Same vendor
- CVE-2025-46315 — A permissions issue was addressed with additional restrictions (7.5 HIGH)
- CVE-2025-46308 — An authorization issue was addressed with improved state management (5.3 MEDIUM)
- CVE-2025-46293 — This issue was addressed with improved handling of symlinks (5.5 MEDIUM)
- CVE-2025-31272 — The issue was addressed with improved checks (7.8 HIGH)
- CVE-2025-30459 — A privacy issue was addressed by removing the vulnerable code (5.5 MEDIUM)
Same CWE
- CVE-2026-12212 — A vulnerability has been found in hcengineering Huly Platform up to 0.7.0 (4.3 MEDIUM)
- CVE-2026-12203 — A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215 (5.3 MEDIUM)
- CVE-2026-53520 — Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool (6.5 MEDIUM)
- CVE-2026-44783 — Discourse is an open-source discussion platform (5.4 MEDIUM)
- CVE-2026-47182 — Frappe is a full-stack web application framework