CVE-2025-43405

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

• CWE-359

• https://support.apple.com/en-us/125634
• https://support.apple.com/en-us/125635Release Notes, Vendor Advisory
• https://support.apple.com/en-us/125636Release Notes, Vendor Advisory

Published

Nov 4, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4340A vulnerability classified as critical has been found in D-L…9.8
• CVE-2025-43400An out-of-bounds write issue was addressed with improved bou…6.3
• CVE-2025-43401A denial-of-service issue was addressed with improved valida…7.5
• CVE-2025-43402The issue was addressed with improved memory handling. This …7.8
• CVE-2025-43403An authorization issue was addressed with improved state man…5.5
• CVE-2025-43404A permissions issue was addressed with additional sandbox re…3.3
• CVE-2025-43406A logic issue was addressed with improved restrictions. This…5.5
• CVE-2025-43407This issue was addressed with improved entitlements. This is…7.8
• CVE-2025-43408This issue was addressed by restricting options offered on a…2.4
• CVE-2025-43409A permissions issue was addressed with additional sandbox re…5.5
• CVE-2025-4341A vulnerability classified as critical was found in D-Link D…9.8
• CVE-2025-43410The issue was addressed with improved handling of caches. Th…2.4