Description
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to gain root privileges.
Published: 2025-11-04
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Root Privilege Escalation
Action: Patch Immediately
AI Analysis

Impact

A validation flaw in macOS was identified where inadequate input sanitization could allow an application to bypass security checks and elevate its privileges to root. The vulnerability is tied to an improper handling of user provided data, classified as CWE‑20, and enables the attacker to execute actions with unrestricted system rights, effectively compromising the integrity and availability of the affected machine.

Affected Systems

Apple’s macOS operating systems are impacted. The vendor released fixes in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1; any installation running a version earlier than these is vulnerable.

Risk and Exploitability

The CVSS score of 7.8 indicates a serious threat, while the EPSS score of less than 1 % implies that exploitation attempts are currently rare. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be local; an attacker must launch or force an application that can supply crafted input to trigger the flaw and gain root privileges.

Generated by OpenCVE AI on April 27, 2026 at 23:31 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest macOS update for your release – Sequoia 15.7.2, Sonoma 14.8.2, or Tahoe 26.1 – using Apple Software Update or the macOS installer.
  • Reboot the machine after the update to ensure the patched binaries and security policies are active.
  • Enable automatic system updates or use a mobile device management solution to enforce the rollout of the security update across all macOS devices in your environment.

Generated by OpenCVE AI on April 27, 2026 at 23:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 28 Apr 2026 00:00:00 +0000

Type Values Removed Values Added
Title Improved Input Sanitization Leading to Root Privilege Escalation on macOS

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to gain root privileges. A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to gain root privileges.

Wed, 17 Dec 2025 21:00:00 +0000

Type Values Removed Values Added
Description A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to gain root privileges. A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to gain root privileges.
References

Tue, 04 Nov 2025 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple macos Sequoia
Apple macos Sonoma
Vendors & Products Apple macos Sequoia
Apple macos Sonoma

Tue, 04 Nov 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Tue, 04 Nov 2025 14:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 04 Nov 2025 01:45:00 +0000

Type Values Removed Values Added
Description A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to gain root privileges.
References

Subscriptions

Apple Macos Macos Sequoia Macos Sonoma
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:07:12.340Z

Reserved: 2025-04-16T15:24:37.126Z

Link: CVE-2025-43472

cve-icon Vulnrichment

Updated: 2025-11-04T13:48:19.007Z

cve-icon NVD

Status : Modified

Published: 2025-11-04T02:15:51.810

Modified: 2026-04-02T19:20:51.883

Link: CVE-2025-43472

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-27T23:45:15Z

Weaknesses