PT-2025-51004 · Apple · Apple Macos

Doug Hogan · Published 2025-11-03 · Updated 2025-12-13 · CVE-2025-43506

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1

Description A logic error existed with inadequate error handling. This issue could prevent iCloud Private Relay from activating when multiple user accounts were simultaneously logged in.

Recommendations Update to macOS version 26.1 to resolve the issue.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2025-43506

Affected Products

Apple Macos

References · 6

• https://osv.dev/vulnerability/CVE-2025-43506 · Vendor Advisory
• https://support.apple.com/en-us/125634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43506 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43506 · Note
• https://twitter.com/VulmonFeeds/status/1999726469329703243 · Twitter Post
• https://twitter.com/CVEnew/status/1999876808611614806 · Twitter Post