macOS
CVE-2025-46283
MEDIUM
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data.
AnalysisAI
A logic validation flaw in macOS Sonoma and Tahoe allows local authenticated apps to access sensitive user data through improved validation mechanisms that were previously insufficient. The vulnerability affects macOS Sonoma versions prior to 14.8.4 and macOS Tahoe prior to 26.2, requiring local access and valid user privileges (PR:L) to exploit. With an EPSS score of 0.02% and no public exploit code identified, the real-world exploitation probability remains minimal despite the CVSS 5.5 rating, though the high confidentiality impact (C:H) warrants timely patching for systems handling sensitive information.
Technical ContextAI
The vulnerability stems from insufficient validation logic (CWE-200: Information Exposure) in macOS permission or sandboxing enforcement mechanisms. When an app runs with user-level privileges on affected macOS versions, inadequate validation of data access boundaries allows circumvention of the intended protections that should restrict access to sensitive user data such as personal files, credentials, or system information. The flaw is specific to the macOS kernel or system framework responsible for enforcing per-app data isolation and requires the attacker's app to be installed and executed in the user's session-this is not a remote or unprivileged local vulnerability.
RemediationAI
Users should update to macOS Sonoma 14.8.4 or later, or macOS Tahoe 26.2 or later, depending on their current macOS release. Apple has released patched versions addressing the logic validation issue; updates are available through System Preferences > General > Software Update or Apple Software Update. For enterprise environments, macOS updates can be deployed via Mobile Device Management (MDM) tools or managed software distribution. As an interim precaution, users should avoid installing apps from untrusted sources and review app permissions in System Preferences > Privacy & Security. Complete details and support are available at https://support.apple.com/en-us/125886 and https://support.apple.com/en-us/126350.
An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility develope
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
A logic issue was addressed with improved restrictions. Rated high severity (CVSS 7.8), this vulnerability is no authent
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
A race condition was addressed with additional validation. Rated high severity (CVSS 7.0), this vulnerability is no auth
This issue was addressed with improved checks. Rated critical severity (CVSS 10.0), this vulnerability is remotely explo
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data t
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today