What is the CVSS score of CVE-2025-43241?

CVE-2025-43241 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

macOS CVE-2025-43241

MEDIUM

Improper Access Control (CWE-284)

2025-07-30 product-security@apple.com

Apple macOS Information Disclosure

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Apr 02, 2026 - 19:37 vuln.today

CVE Published

Jul 30, 2025 - 00:15 nvd

MEDIUM 5.5

DescriptionCVE.org

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to read files outside of its sandbox.

AnalysisAI

Improper sandbox enforcement in macOS allows local applications to read files outside their designated sandbox boundaries without user authorization. The vulnerability affects macOS Sequoia before 15.6, macOS Sonoma before 14.7.7, and macOS Ventura before 13.7.7. An attacker controlling a sandboxed application can bypass file access restrictions through a permissions validation flaw, enabling confidentiality breaches of user data outside the app's intended scope. No public exploit code or active exploitation has been confirmed; the EPSS score of 0.01% indicates minimal real-world exploitation likelihood despite the medium CVSS rating.

Technical ContextAI

This vulnerability stems from improper implementation of macOS sandbox enforcement mechanisms, classified under CWE-284 (Improper Access Control - Permissions, Privileges, and Other Access Controls). The macOS sandbox (also known as Sandbox.kext) is a mandatory access control system that restricts applications to specific file system locations and inter-process communication channels. The flaw allows a sandboxed process to circumvent these restrictions by exploiting insufficient permission validation during file access operations. The vulnerability requires local code execution (attack vector: local) and user interaction (a user must run or interact with the malicious application), but does not require elevated privileges (PR:N), making it accessible to any local user executing untrusted software.

RemediationAI

Vendor-released patches are available for all affected macOS versions: update to macOS Sequoia 15.6 or later, macOS Sonoma 14.7.7 or later, or macOS Ventura 13.7.7 or later. Users should enable automatic security updates in System Settings under General > Software Update to receive the patch automatically. As an interim measure before patching, users should review installed applications and uninstall any untrusted third-party apps that request broad file system access permissions. Complete advisory details are available at https://support.apple.com/en-us/124149, https://support.apple.com/en-us/124150, and https://support.apple.com/en-us/124151.