---
id: CVE-2025-43313
title: A logic issue was addressed with improved restrictions
summary: >-
  A logic issue was addressed with improved restrictions. This issue is fixed in
  macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be
  able to access sensitive user data.
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'
cwe:
  - CWE-284
vendor: apple
product: macos
affected:
  - 'macos >= 13.0, < 13.7.7'
  - 'macos >= 14.0, < 14.7.7'
  - 'macos >= 15.0, < 15.6'
patched:
  - macos 15.6
published: '2025-10-15'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T11:10:00.250'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-43313'
references:
  - url: 'https://support.apple.com/en-us/124149'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/124150'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/124151'
    label: product-security@apple.com
tags:
  - nvd
epss: 0.00153
epssPercentile: 0.03904
ingestedAt: '2026-10-08T11:31:27.445Z'
---

## Overview

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

## Affected

- `macos >= 13.0, < 13.7.7`
- `macos >= 14.0, < 14.7.7`
- `macos >= 15.0, < 15.6`

## Remediation

Upgrade past the affected range:

- `macos 15.6`