{"id":"CVE-2025-43336","aliases":["EUVD-2025-37725","GHSA-xm97-jwxx-3wfh"],"status":"published","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00203,"percentile":0.10327,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2025-11-04T01:16:23Z","modified":"2026-10-18T21:10:00Z","products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/125634"},{"url":"https://support.apple.com/en-us/125635","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/125636","tags":["Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43336"},{"url":"https://github.com/advisories/GHSA-xm97-jwxx-3wfh"}],"sources":{"cve":[{"id":"CVE-2025-43336","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information.","status":"published","published":"2025-11-04T01:16:23.918Z","modified":"2026-04-02T18:15:20.081Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:32:26.964524Z"}],"euvd":[{"id":"EUVD-2025-37725","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information.","status":"published","published":"2025-11-04T01:16:23Z","modified":"2026-04-02T18:15:20Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:20.345501Z"}],"ghsa":[{"id":"GHSA-xm97-jwxx-3wfh","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app with root privileges may be able to access private information.","status":"published","published":"2025-11-04T03:30:26Z","modified":"2025-12-17T21:31:38Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:05:15.153655Z"}],"nvd":[{"id":"CVE-2025-43336","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information.","status":"published","published":"2025-11-04T02:15:40.433Z","modified":"2026-10-18T21:10:00.12Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:11:41.607433Z"}]}}