PT-2025-44846 · Apple · Apple Macos+2

Lee Dong Ha + 2 · Published 2025-11-03 · Updated 2025-11-24 · CVE-2025-43401

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2

Description A denial-of-service issue exists due to insufficient validation. A remote attacker may be able to cause a denial-of-service.

Recommendations Update to macOS Sonoma version 14.8.2. Update to macOS Sequoia version 15.7.2.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-43401

ZDI-25-1005

Affected Products

Apple Macos

Macos Sequoia

Macos Sonoma

References · 11

• https://zerodayinitiative.com/advisories/ZDI-25-1005 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/726094 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-43401 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/726081 · Security Note
• https://support.apple.com/en-us/125635 · Vendor Advisory
• https://support.apple.com/en-us/125636 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43401 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/726112 · Security Note
• https://support.apple.com/en-us/125634 · Note
• https://twitter.com/SystemTek_UK/status/1992914204651553177 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43401 · Note