What is the CVSS score of CVE-2025-43473?

CVE-2025-43473 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Apple macOS CVE-2025-43473

MEDIUM

Information Exposure (CWE-200)

2025-12-12 product-security@apple.com

Information Disclosure Apple

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

5.5 MEDIUM

Local app with standard user privileges reads sensitive data; no integrity or availability impact; scope unchanged as exploitation is contained to the local user session.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 21, 2026 - 01:27 vuln.today

CVE Published

Dec 12, 2025 - 21:15 nvd

MEDIUM 5.5

DescriptionNVD

This issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to access sensitive user data.

AnalysisAI

Sensitive user data exposure in Apple macOS allows a locally-installed application to bypass access controls and read data outside its authorized scope, exploiting improper state management. Affected systems include macOS Sequoia prior to 15.7.4, macOS Sonoma prior to 14.8.4, and macOS Tahoe prior to 26.1. No public exploit identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog, but the high confidentiality impact (CVSS C:H) warrants prompt patching on systems where untrusted applications may execute.

Technical ContextAI

The root cause is classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), specifically arising from a state management defect within the macOS operating system kernel or a core system framework. State management flaws of this type occur when the OS fails to correctly track or enforce the access permission state of an application across transitions - such as context switches, IPC operations, or permission checks - allowing an app to read memory, files, or system resources it should not have access to. Apple's fix description ('improved state management') is consistent with a race condition or stale-state scenario in a security-sensitive code path. The CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* covers all macOS versions across the Sonoma, Sequoia, and Tahoe release lines prior to their respective patched releases.

RemediationAI

Upgrade to macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, or macOS Tahoe 26.1, as confirmed by Apple's security advisories at https://support.apple.com/en-us/125634, https://support.apple.com/en-us/126349, and https://support.apple.com/en-us/126350. Users on macOS Ventura or earlier who cannot upgrade should be aware these releases are not listed as receiving a fix and may require an OS version upgrade. As a compensating control where patching is not immediately possible, restrict installation of third-party or unverified applications using macOS Gatekeeper and MDM application allowlisting policies - this reduces the attack surface by preventing untrusted apps from executing, though it does not eliminate the underlying vulnerability. No workaround eliminates the flaw itself; patching is the only confirmed remediation.