Description
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges.
Published: 2025-07-29
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation to root
Action: Immediate Patch
AI Analysis

Impact

A logic flaw in macOS permits a malicious application to acquire root privileges. The flaw stems from insufficient restrictions on privileged operations, classified as CWE‑269. The vulnerability was corrected by applying tighter access controls in later releases of macOS Sequoia and Sonoma.

Affected Systems

Apple macOS is affected. The issue remains present in versions prior to macOS Sequoia 15.6 and macOS Sonoma 14.7.7; it is fixed in those and later releases of the two operating systems.

Risk and Exploitability

The CVSS score of 7.8 indicates high severity, while an EPSS of less than 1% suggests a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is installing a malicious app that, once executed, gains elevated privileges; this bypasses normal user privilege separation and enables full system control.

Generated by OpenCVE AI on April 28, 2026 at 22:42 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to macOS Sequoia 15.6 or later, or macOS Sonoma 14.7.7 or later
  • Enable Gatekeeper and restrict installation to signed, developer‑verified applications
  • Limit application permissions by disabling unnecessary system access and reviewing all granted privileges

Generated by OpenCVE AI on April 28, 2026 at 22:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-23120 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges.
History

Tue, 28 Apr 2026 23:00:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Logic Flaw in macOS Access Controls

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Thu, 31 Jul 2025 21:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Thu, 31 Jul 2025 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Jul 2025 11:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Vendors & Products Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma

Tue, 29 Jul 2025 23:45:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges.
References

Subscriptions

Apple Macos Macos Sequoia Macos Sonoma
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:14:04.034Z

Reserved: 2025-04-16T15:24:37.092Z

Link: CVE-2025-43248

cve-icon Vulnrichment

Updated: 2025-11-03T20:02:55.242Z

cve-icon NVD

Status : Modified

Published: 2025-07-30T00:15:36.633

Modified: 2025-11-03T20:18:56.903

Link: CVE-2025-43248

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T22:45:25Z

Weaknesses