← back
CVE-2025-43263

CVE-2025-43263

CVSS 7.1 HIGHEPSS 0.2%CWE-284
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.1EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
15 Sep 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products
Apple · Xcode