macOS
CVE-2025-43513
MEDIUM
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to read sensitive location information.
AnalysisAI
Local arbitrary applications on macOS can read sensitive location information due to a permissions validation flaw (CWE-284), affecting macOS Sequoia, Sonoma, and Tahoe. The vulnerability requires user interaction to trigger but grants unauthorized access to location data without proper authorization checks. Apple has released patches in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2 to remediate the issue by removing the vulnerable code. No public exploit or active exploitation has been confirmed.
Technical ContextAI
The vulnerability stems from improper permission enforcement in macOS's location data access controls, classified under CWE-284 (Improper Access Control - Permissions, Privileges, and Other Access Controls). The underlying issue involves the operating system's failure to properly validate application entitlements or permissions before granting access to sensitive location information APIs. This is a local privilege escalation vector where unprivileged or untrusted applications can bypass the normal permission prompts and access restrictions that protect location services. The affected technology spans macOS kernel-level permission enforcement mechanisms that should gate access to Core Location and related services, impacting all macOS versions mentioned in the patch releases.
RemediationAI
Apply the security updates released by Apple: macOS Sequoia users should upgrade to version 15.7.3 or later, macOS Sonoma users should upgrade to version 14.8.3 or later, and macOS Tahoe users should upgrade to version 26.2 or later. These patch releases remove the vulnerable code that permitted unauthorized location data access. Updates are available through the macOS Software Update mechanism (System Settings > General > Software Update) or by downloading directly from Apple's security updates page at https://support.apple.com/en-us/125886. No workarounds are available for unpatched systems; patching is the definitive remediation. Users unable to patch immediately should review and restrict location access permissions in System Settings > Privacy & Security > Location Services to limit potential exposure.
An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility develope
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
A logic issue was addressed with improved restrictions. Rated high severity (CVSS 7.8), this vulnerability is no authent
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
A race condition was addressed with additional validation. Rated high severity (CVSS 7.0), this vulnerability is no auth
This issue was addressed with improved checks. Rated critical severity (CVSS 10.0), this vulnerability is remotely explo
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data t
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the
Same weakness CWE-284 – Improper Access Control
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today