CVE-2025-43499

What the vulnerability is

CVE-2025-43499 addresses a logic issue in the entitlement checks of Apple operating systems, including iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1 [1][2][3]. The root cause is a permissions oversight that allows an app to bypass system protections and access sensitive user data.

Attack vector

An attacker does not require special network access or authentication; the vulnerability can be triggered by a malicious or compromised app running on the device [3][4][]. The prerequisite is that the app must already be installed on a vulnerable system.

Impact

Successful exploitation grants the app unintended access to sensitive user data [1][2][]. An attacker could retrieve private information such as contacts, messages, or other protected user data.

Mitigation

Apple has released updates for all affected platforms [1][]. Users should update to iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, or macOS Tahoe 26.1 [4][]. The issue was disclosed by Gergely Kalman (@gergely_kalman) [1][].