CVE-2025-43401

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A remote attacker may be able to cause a denial-of-service.

• CWE-20

• https://support.apple.com/en-us/125634
• https://support.apple.com/en-us/125635Release Notes, Vendor Advisory
• https://support.apple.com/en-us/125636Release Notes, Vendor Advisory

Published

Nov 4, 2025

Last Modified

Oct 18, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43396A logic issue was addressed with improved checks. This issue…5.5
• CVE-2025-43397A permissions issue was addressed by removing the vulnerable…5.5
• CVE-2025-43398The issue was addressed with improved memory handling. This …5.5
• CVE-2025-43399This issue was addressed with improved redaction of sensitiv…7.5
• CVE-2025-4340A vulnerability classified as critical has been found in D-L…9.8
• CVE-2025-43400An out-of-bounds write issue was addressed with improved bou…6.3
• CVE-2025-43402The issue was addressed with improved memory handling. This …7.8
• CVE-2025-43403An authorization issue was addressed with improved state man…5.5
• CVE-2025-43404A permissions issue was addressed with additional sandbox re…3.3
• CVE-2025-43405A permissions issue was addressed with additional sandbox re…7.5
• CVE-2025-43406A logic issue was addressed with improved restrictions. This…5.5
• CVE-2025-43407This issue was addressed with improved entitlements. This is…7.8