Findings

CVE-2025-43306

A logic issue was addressed with improved checks.

Published May 26, 2026 · updated Jul 24, 2026 · apple macos

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2026 · NIST NVD

    Detected

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.

  2. Jul 24, 2026 · NIST NVD

    Updated

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.

Affected

  • cpe apple/macosversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-43306

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-43306

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.

    nvd.nist.gov

References

CVE-2025-43306 · ZeroDay Findings