PT-2025-31293 · Apple · Apple Macos

Gergely Kalman + 1 · Published 2025-07-29 · Updated 2025-08-01 · CVE-2025-43199

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7

Description A permissions issue existed that allowed a malicious application to potentially gain root privileges. The issue was addressed by removing the vulnerable code.

Recommendations Update to macOS version 15.6 or later. Update to macOS version 14.7.7 or later. Update to macOS version 13.7.7 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2025-09506

CVE-2025-43199

Affected Products

Apple Macos

References · 15

• https://support.apple.com/en-us/124149 · Vendor Advisory
• https://support.apple.com/en-us/124151 · Vendor Advisory
• https://support.apple.com/en-us/124150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43199 · Security Note
• https://bdu.fstec.ru/vul/2025-09506 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43199 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43199 · Note
• http://seclists.org/fulldisclosure/2025/Jul/33 · Note
• https://twitter.com/gergely_kalman/status/1950266027981324632 · Twitter Post
• https://twitter.com/CVEnew/status/1950343996783677727 · Twitter Post
• https://twitter.com/gergely_kalman/status/1951297379170234520 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1mesjhb/top_10_trending_cves_01082025 · Reddit Post
• http://seclists.org/fulldisclosure/2025/Jul/32 · Note
• https://twitter.com/gergely_kalman/status/1950692104155570210 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Jul/34 · Note