Base Score

HIGH8.2

CVE-2025-43371

This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox.

VectorLOCAL

Published Byproduct-security@apple.com

Published DateSep 15, 2025, 23:15

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

8.2

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

NONE

References

https://support.apple.com/en-us/125117
http://seclists.org/fulldisclosure/2025/Sep/60

Base Score

HIGH8.2

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

8.2

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

NONE