CVE-2025-43407

HIGH

Apple - Sandbox Escape

Title source: llm

Description

This issue was addressed with improved entitlements. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox.

Exploits (1)

nomisec SUSPICIOUS

by mranonymous234 · poc

https://github.com/mranonymous234/Sandbox-Escape-iOS-18.0-26.0

View Code ZIP pw:eip

References (6)

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/125632

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/125635

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/125636

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/125637

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/125638

[Vendor Advisory] https://support.apple.com/en-us/125634

Scores

CVSS v3 7.8

EPSS 0.0001

EPSS Percentile 2.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-284

Status published

Products (11)

Apple/iOS and iPadOS < 26.1

apple/ipados < 26.1

apple/iphone_os < 26.1

Apple/macOS < 14.8.2

Apple/macOS < 15.7.2

Apple/macOS < 26.1

apple/macos 14.0 - 14.8.2

apple/tvos < 26.1

Apple/tvOS < 26.1

apple/visionos < 26.1

... and 1 more

Published Nov 04, 2025

Tracked Since Feb 18, 2026