Paper/Archive/CVE-2025-43275

CVE-2025-43275

Apple macOS — A race condition was addressed with additional validation.

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 50.1.501 × 2010.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox.

Affected

ProductAffectedFixed inSource

macOS< 13.7.713.7.7CNA

macOS< 14.7.714.7.7CNA

macOS< 15.615.6CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/124149 refsupport.apple.com/en-us/124150 refsupport.apple.com/en-us/124151 refseclists.org/fulldisclosure/2025/Jul/34 refseclists.org/fulldisclosure/2025/Jul/33 refseclists.org/fulldisclosure/2025/Jul/32