CVE-2025-43208
Published Sep 15, 2025
·Updated
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to read sensitive location information.
Credit
Csaba Fitzl@@theevilbit(Kandji), Kirin@@Pwnrin, ABC Research s.r.o., Mickey Jin@@patch1t, an anonymous researcher, Nolan Astrein(Kandji), Mickey Jin@@patch1t(Cisco Talos), Kirin@@Pwnrin(Cisco Talos), Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Zhongquan Li@@Guluisacat, Bilal Siddiqui, Hossein Lotfi@@hosselot(Trend Micro Zero Day Initiative), Michael Reeves@@IntegralPilot, Dawuge(Shuffle Team), Rosyna Keller(Totally Not Malicious Software), Guilherme Rambo(Best Buddy Apps), Yinyi Wu@@_3ndy1(Dawn Security Lab of JD), @@zlluny(Trend Micro Zero Day Initiative), 이동하 (Lee Dong Ha)(SSA Lab), Shantanu Thakur, Wang Yu(Cyberserval), Anonymous(Trend Micro Zero Day Initiative), Yiğit Can YILMAZ@@yilmazcanyigit, Keisuke Hosoda, Ye Zhang@@VAR10CK(Baidu Security), Viktor Oreshkin, Nathaniel Oh@@calysteon, Gergely Kalman@@gergely_kalman, Hikerell (Loadshine Lab), Rodolphe Brunetti@@eisw0lf(Lupus Nova), LFY@@secsys(Fudan University), CVE-2025-40909, Zhongcheng Li(IES Red Team of ByteDance), @@zlluny, CVE-2024-27280, KPC(Cisco Talos), @@RenwaX23, Ye Zhang(Baidu Security), pattern-f@@pattern_F_, 정답이 아닌 해답, Kirin@@Pwnrin(Computer Science), Cristian Dinca(Computer Science), Romania, Noah Gregory (wts.dev), CVE-2025-6965, JZ, Seo Hyun-gyu@@wh1te4ever, Luke Roberts@@rookuu, Ferdous Saljooki@@malwarezoo(Jamf), Justin Elliot Fu, Pyrophoria(GrapheneOS), an anonymous researcher(GrapheneOS), James J Kalafus, Michel Migdal, ken super, Jaydev Ahire, Big Bear, Ignacio Sanmillan@@ulexec, Mike Cardwell(grepular), Bob Lord, Pawel Wylecial(REDTEAM), Rodolphe BRUNETTI@@eisw0lf(Lupus Nova)
Affected Software
2 affected componentsFixes available
Apple macOS Tahoe<26
26
Apple macOS<26.0
Event History
Sep 15, 2025
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
CVE Published
via MITRE·10:34 PM
Data Sourced
via MITRE·10:34 PM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-43208?
CVE-2025-43208 is considered a permissions issue that poses a risk of unauthorized access to sensitive location information.
2
How do I fix CVE-2025-43208?
To fix CVE-2025-43208, upgrade to macOS Tahoe 26 or later, as additional restrictions have been implemented to address this issue.
3
What specific issue does CVE-2025-43208 address?
CVE-2025-43208 addresses a permissions issue that may allow an app to read sensitive location information without proper authorization.
4
Which versions of macOS Tahoe are affected by CVE-2025-43208?
Versions of macOS Tahoe prior to 26 are affected by CVE-2025-43208.
5
Are there any recommended actions for users of macOS Tahoe regarding CVE-2025-43208?
Users of macOS Tahoe should upgrade to version 26 or later to mitigate the risks associated with CVE-2025-43208.