What is the CVSS score of CVE-2025-43512?

CVE-2025-43512 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of iOS are affected by CVE-2025-43512?

CVE-2025-43512 is a high-severity local privilege escalation affecting Apple macOS (Sonoma, Sequoia, Tahoe) and iOS/iPadOS 18.x that enables authenticated users to gain system-level access through…

How to fix or mitigate CVE-2025-43512?

Within 24 hours: Inventory all macOS and iOS/iPadOS devices across your organization and identify those running Sonoma 14.x, Sequoia 15.x, Tahoe 26.x, or iOS/iPadOS 18.x. Within 7 days: Deploy Apple security updates immediately-macOS Sequoia 15.7.3, Sonoma 14.8.3, Tahoe 26.2, iOS 18.7.3, and iPadOS 18.7.3-via Mobile Device Management (MDM) with mandatory compliance enforcement. Within 30 days: Validate 100% patching completion and audit application permissions across enrolled devices to restrict suspicious app installations.

iOS CVE-2025-43512

HIGH

Improper Privilege Management (CWE-269)

2025-12-12 product-security@apple.com

Apple iOS macOS Privilege Escalation

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 02, 2026 - 19:37 vuln.today

CVE Published

Dec 12, 2025 - 21:15 nvd

HIGH 7.8

DescriptionCVE.org

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to elevate privileges.

AnalysisAI

Local privilege escalation in Apple macOS (Sonoma 14.x, Sequoia 15.x, Tahoe 26.x) and iOS/iPadOS 18.x allows authenticated users to gain elevated system privileges through malicious applications exploiting a logic flaw in privilege checking mechanisms. Apple has released patches across all affected platforms (iOS 18.7.3, iPadOS 18.7.3, macOS Sequoia 15.7.3, Sonoma 14.8.3, Tahoe 26.2). No public exploit identified at time of analysis, with EPSS score of 0.01% (3rd percentile) indicating minimal observed exploitation activity.

Technical ContextAI

This vulnerability represents a CWE-269 improper privilege management flaw affecting Apple's operating system security boundary enforcement. The logic issue resides in the privilege escalation prevention mechanisms that should restrict applications from gaining higher system privileges than initially granted. Apple's advisory indicates this was resolved through 'improved checks,' suggesting the flaw involved insufficient validation of privilege requests or improper handling of process capabilities during application execution. The vulnerability affects multiple macOS generations (Sonoma 14.x, Sequoia 15.x, and the newer Tahoe 26.x branch) as well as the iOS/iPadOS 18.x mobile platform, indicating a shared codebase component across Apple's operating system family. The CPE strings confirm impact across Apple's macOS ecosystem, though the mobile platforms share the underlying vulnerability pattern.

RemediationAI

Apple has released patched versions addressing this vulnerability across all affected platforms. Users should immediately upgrade to iOS 18.7.3, iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, or macOS Tahoe 26.2 depending on their platform. Updates can be applied through System Settings (macOS) or Settings (iOS/iPadOS) under Software Update, or through Apple's enterprise deployment tools for managed environments. Detailed security content and update instructions are available in Apple's official security advisories at https://support.apple.com/en-us/125887 for macOS and https://support.apple.com/en-us/125888 for iOS/iPadOS. No workarounds are provided; patching is the only effective remediation. Organizations should prioritize updates for multi-user systems and high-value targets where local privilege escalation poses significant risk to sensitive data or system integrity.