- 246/2025
- High
Apple has released security updates to address multiple vulnerabilities across macOS Tahoe, Sequoia, Sonoma, and Safari.
The addressed vulnerabilities could allow the attacker to perform denial of service attacks, corrupt memory, bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, and gain unauthorized access to the affected system.
Sample of the addressed vulnerabilities:
1. Apple Safari Code Execution Vulnerability (CVE-2025-43431):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
2. Apple macOS Sequoia Privilege Escalation Vulnerability (CVE-2025-43387):
- CVSS: 7.8
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Consequences: Gain Privilege
Vulnerabilities
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.