CVE-2025-43498

Опубликовано: 04 нояб. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data.

Ссылки

https://support.apple.com/en-us/125632
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125634
https://support.apple.com/en-us/125635
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125636
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125638
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.8.2 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 15.0 (включая) до 15.7.2 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

EPSS

Процентиль: 3%

0.00016

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

GHSA-pqwf-2452-r2f3

CVSS3: 5.5

github

3 месяца назад

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data.

EPSS

Процентиль: 3%

0.00016

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-284