CVE-2025-43420

MEDIUM

macOS - Info Disclosure

Title source: llm

Description

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data.

References (3)

Scores

CVSS v3 4.7
EPSS 0.0001
EPSS Percentile 2.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-362
Status published

Affected Products (1)

apple/macos < 14.8.2

Timeline

Published Nov 04, 2025
Tracked Since Feb 18, 2026