CVE-2025-43482

MEDIUM EXPLOITED

macOS < 14.8.3, < 15.7.3, < 26.2 - Denial of Service

Title source: llm

Exploitation Summary

CVE-2025-43482 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.

References (3)

Core 3

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/125887

Release Notes, Vendor Advisory

https://support.apple.com/en-us/125888

Vendor Advisory

https://support.apple.com/en-us/125886

Scores

CVSS v3 5.5

EPSS 0.0002

EPSS Percentile 6.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

VulnCheck KEV 2026-04-07

CWE

CWE-20

Status published

Products (4)

Apple/macOS < 14.8.3

Apple/macOS < 15.7.3

Apple/macOS < 26.2

apple/macos 14.0 - 14.8.3

Published Dec 12, 2025

Tracked Since Feb 18, 2026