PT-2025-44846 · Apple · Apple Macos+2

Lee Dong Ha + 2 · Publicado 2025-11-03 · Atualizado 2025-11-24 · CVE-2025-43401

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2

Description A denial-of-service issue exists due to insufficient validation. A remote attacker may be able to cause a denial-of-service.

Recommendations Update to macOS Sonoma version 14.8.2. Update to macOS Sequoia version 15.7.2.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-43401

ZDI-25-1005

Produtos afetados

Apple Macos

Macos Sequoia

Macos Sonoma

Referências · 11

• https://zerodayinitiative.com/advisories/ZDI-25-1005 · Nota de Segurança
• https://safe-surf.ru/specialists/bulletins-nkcki/726094 · Nota de Segurança
• https://support.apple.com/en-us/125634 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-43401 · Nota de Segurança
• https://twitter.com/SystemTek_UK/status/1992914204651553177 · Publicação no Twitter
• https://safe-surf.ru/specialists/bulletins-nkcki/726081 · Nota de Segurança
• https://support.apple.com/en-us/125635 · Aviso do Fabricante
• https://support.apple.com/en-us/125636 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-43401 · Aviso do Fabricante
• https://safe-surf.ru/specialists/bulletins-nkcki/726112 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43401 · Nota