CVE-2025-43253
This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to launch arbitrary binaries on a trusted device.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - product-security@apple.com
- Published
- 2025-07-30
- Last modified
- 2026-04-02
- Weaknesses
- CWE-20
Affected products
References
- https://support.apple.com/en-us/124149
- https://support.apple.com/en-us/124150
- http://seclists.org/fulldisclosure/2025/Jul/32
- http://seclists.org/fulldisclosure/2025/Jul/33