PT-2025-31344 · Apple · Apple Macos

Kazma Ye + 1 · Published 2025-07-29 · Updated 2025-07-30 · CVE-2025-43197

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7

Description An application may be able to access sensitive user data due to missing entitlement checks. This issue was addressed with additional entitlement checks.

Recommendations Update macOS to version 15.6 or later. Update macOS to version 14.7.7 or later. Update macOS to version 13.7.7 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-09505

CVE-2025-43197

Affected Products

Apple Macos

References · 12

• https://bdu.fstec.ru/vul/2025-09505 · Security Note
• https://support.apple.com/en-us/124149 · Vendor Advisory
• https://support.apple.com/en-us/124151 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43197 · Security Note
• https://support.apple.com/en-us/124150 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43197 · Vendor Advisory
• https://t.me/cveNotify/130277 · Telegram Post
• http://seclists.org/fulldisclosure/2025/Jul/33 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43197 · Note
• http://seclists.org/fulldisclosure/2025/Jul/32 · Note
• https://twitter.com/CVEnew/status/1950365033130524942 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Jul/34 · Note