Description
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox restrictions.
Published: 2025-07-29
Score: 4.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Sandbox Escalation
Action: Patch
AI Analysis

Impact

The vulnerability involves a privacy flaw where a sandboxed process can bypass macOS sandbox restrictions. It was addressed by removing the vulnerable code in Sequoia 15.6 and is classified as CWE-311, meaning sensitive data was handled without proper protection. Based on the description, it is inferred that an attacker controlling a sandboxed application could read or modify data that should be confined within the sandbox, potentially exposing confidential information.

Affected Systems

Apple macOS systems running versions prior to Sequoia 15.6 are potentially affected. The CVE statement fixes the issue in Sequoia 15.6, implying that earlier releases still contain the code that may allow sandbox circumvention.

Risk and Exploitability

The CVSS score of 4.4 indicates moderate severity, while the EPSS score of less than 1% shows a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because the description does not mention remote exploitation, it is inferred that the threat requires a sandboxed application to be run locally; remote attack is unlikely. The overall risk remains low to moderate.

Generated by OpenCVE AI on April 28, 2026 at 11:04 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install macOS Sequoia 15.6 or later, which removes the vulnerable code and restores proper sandbox enforcement.
  • Restrict sandboxed applications to the minimal set of system resources they require, reducing the potential impact of a sandbox escape.
  • Audit sandboxed applications for handling sensitive data and enforce encryption or other protection mechanisms in accordance with best practices.

Generated by OpenCVE AI on April 28, 2026 at 11:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-23058 A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox restrictions.
History

Tue, 28 Apr 2026 11:30:00 +0000

Type Values Removed Values Added
Title Sandbox Escalation via Unprotected Sensitive Data in macOS

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Thu, 31 Jul 2025 21:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Wed, 30 Jul 2025 14:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-311
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 30 Jul 2025 11:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple macos Sequoia
Vendors & Products Apple
Apple macos
Apple macos Sequoia

Tue, 29 Jul 2025 23:45:00 +0000

Type Values Removed Values Added
Description A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox restrictions.
References

Subscriptions

Apple Macos Macos Sequoia
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:07:57.665Z

Reserved: 2025-04-16T15:24:37.101Z

Link: CVE-2025-43274

cve-icon Vulnrichment

Updated: 2025-11-03T20:03:53.023Z

cve-icon NVD

Status : Modified

Published: 2025-07-30T00:15:38.360

Modified: 2025-11-03T20:18:59.507

Link: CVE-2025-43274

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T11:15:26Z

Weaknesses