Description
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
Published: 2025-07-29
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

A race condition exists that can cause the operating system to terminate unexpectedly, resulting in a denial of service. The weakness is a classic race condition (CWE‑362) where improper state handling allows a malicious or misbehaving application to trigger system termination. The impact is a loss of availability for the impacted device, potentially interrupting critical processes and user sessions.

Affected Systems

Apple macOS versions prior to macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7 are affected. The vulnerability is present in all operating system builds that lack the improved state‑handling fix described in the CVE. Users running any of these unsupported releases are at risk.

Risk and Exploitability

The CVSS base score of 9.8 indicates a severe risk, while the EPSS score of less than 1% suggests low current exploit probability. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or system‑level, as the race condition requires interaction with specific system components. The exploit, however, could be triggered by a malicious application or by abuse of legitimate applications that invoke the vulnerable code paths.

Generated by OpenCVE AI on April 28, 2026 at 10:58 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade your macOS installation to at least macOS Sequoia 15.6, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7, depending on your platform.
  • Enable automatic system updates to receive future security fixes and reduce the window of exposure.
  • Regularly review Apple Security Advisories for updates on this vulnerability.

Generated by OpenCVE AI on April 28, 2026 at 10:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-23124 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
History

Tue, 28 Apr 2026 11:15:00 +0000

Type Values Removed Values Added
Title Race Condition in macOS Causes Unexpected System Termination

Mon, 03 Nov 2025 20:30:00 +0000


Thu, 31 Jul 2025 20:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Wed, 30 Jul 2025 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Jul 2025 11:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Ventura
Vendors & Products Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Ventura

Tue, 29 Jul 2025 23:45:00 +0000

Type Values Removed Values Added
Description A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
References

Subscriptions

Apple Macos Macos Sequoia Macos Sonoma Macos Ventura
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:12:29.087Z

Reserved: 2025-04-16T15:24:37.092Z

Link: CVE-2025-43244

cve-icon Vulnrichment

Updated: 2025-11-03T20:02:41.548Z

cve-icon NVD

Status : Modified

Published: 2025-07-30T00:15:36.213

Modified: 2025-11-03T20:18:56.337

Link: CVE-2025-43244

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T11:00:14Z

Weaknesses