PT-2025-37816 · Apple · Apple Macos

Published 2025-09-15 · Updated 2025-09-16 · CVE-2025-43310

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7 macOS versions prior to 14.8 macOS versions prior to 26

Description A configuration issue was addressed with additional restrictions. An app may be able to trick a user into copying sensitive data to the pasteboard.

Recommendations Update to macOS version 15.7. Update to macOS version 14.8. Update to macOS version 26.

Fix

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2025-43310

Affected Products

Apple Macos

References · 11

• https://support.apple.com/en-us/125110 · Vendor Advisory
• https://support.apple.com/en-us/125112 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43310 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43310 · Vendor Advisory
• https://support.apple.com/en-us/125111 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1967901692176834831 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Sep/55 · Note
• https://twitter.com/CVEnew/status/1967819547559285209 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43310 · Note
• http://seclists.org/fulldisclosure/2025/Sep/53 · Note
• http://seclists.org/fulldisclosure/2025/Sep/54 · Note