PT-2025-31324 · Apple · Macos Ventura 13.7.7+3

Mickey Jin + 1 · Published 2025-07-29 · Updated 2025-07-30 · CVE-2025-43249

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7

Description A logic issue was addressed with improved checks. An app may be able to gain root privileges.

Recommendations Update to macOS Sequoia 15.6 or later. Update to macOS Sonoma 14.7.7 or later. Update to macOS Ventura 13.7.7 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-43249

Affected Products

Apple Macos

Macos Sequoia 15.6

Macos Sonoma 14.7.7

Macos Ventura 13.7.7

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-43249 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43249 · Vendor Advisory
• https://support.apple.com/en-us/124150 · Vendor Advisory
• https://support.apple.com/en-us/124151 · Vendor Advisory
• https://support.apple.com/en-us/124149 · Vendor Advisory
• https://twitter.com/CVEnew/status/1950343995890315422 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Jul/32 · Note
• http://seclists.org/fulldisclosure/2025/Jul/33 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43249 · Note
• http://seclists.org/fulldisclosure/2025/Jul/34 · Note