PT-2025-31323 · Apple · Macos Sequoia 15.6+2

Mickey Jin + 1 · Published 2025-07-29 · Updated 2025-07-30 · CVE-2025-43248

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7

Description A logic issue was addressed with improved restrictions. A malicious app may be able to gain root privileges.

Recommendations Update to macOS Sequoia 15.6 or later. Update to macOS Sonoma 14.7.7 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-43248

Affected Products

Apple Macos

Macos Sequoia 15.6

Macos Sonoma 14.7.7

References · 8

• https://osv.dev/vulnerability/CVE-2025-43248 · Vendor Advisory
• https://support.apple.com/en-us/124150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43248 · Security Note
• https://support.apple.com/en-us/124149 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43248 · Note
• http://seclists.org/fulldisclosure/2025/Jul/32 · Note
• https://twitter.com/CVEnew/status/1950344026886144462 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Jul/33 · Note