CVE-2025-43482

CVSS 5.5 MEDIUMEPSS 0.2%◆ VulnCheck KEVCWE-20

Vexday Risk Score

35Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Dec 2025Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Apple · macOS

References

https://support.apple.com/en-us/125886 https://support.apple.com/en-us/125887 https://support.apple.com/en-us/125888