{"id":"CVE-2025-43187","aliases":["EUVD-2025-26255","GHSA-xrjg-w3rg-6hjx"],"status":"published","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0024,"percentile":0.15226,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-08-29T00:28:52Z","modified":"2026-10-18T21:10:00Z","products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/124149","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/124150","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/124151","tags":["Release Notes","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/34"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/33"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/32"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43187"},{"url":"https://github.com/advisories/GHSA-xrjg-w3rg-6hjx"}],"sources":{"cve":[{"id":"CVE-2025-43187","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.","status":"published","published":"2025-08-29T00:28:52.591Z","modified":"2026-04-02T18:25:09.11Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:32:26.964524Z"}],"euvd":[{"id":"EUVD-2025-26255","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.","status":"published","published":"2025-08-29T00:28:52Z","modified":"2026-04-02T18:25:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:17.729131Z"}],"ghsa":[{"id":"GHSA-xrjg-w3rg-6hjx","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. Running an hdiutil command may unexpectedly execute arbitrary code.","status":"published","published":"2025-08-29T03:30:50Z","modified":"2025-11-03T21:34:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:24.41654Z"}],"nvd":[{"id":"CVE-2025-43187","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.","status":"published","published":"2025-08-29T01:15:34.737Z","modified":"2026-10-18T21:10:00.12Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:11:26.200344Z"}]}}