CVE-2025-43240

MEDIUM EPSS 52.8%
Published Jul 30, 202511mo ago · Modified Jun 17, 20261w ago
6.2 CVSS 3.1
Medium
Find Similar
Published Jul 30, 2025 11mo ago
Last Modified Jun 17, 2026 1w ago

Description

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.

CVSS Details

Base Score
6.2
Exploitability
2.5
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
52.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-703

Affected Products 2

VendorProductVersionRange
applesafari* <18.6
applemacos* <15.6

References 6

  • seclists.org http://seclists.org/fulldisclosure/2025/Aug/0
  • seclists.org http://seclists.org/fulldisclosure/2025/Jul/32
  • openwall.com http://www.openwall.com/lists/oss-security/2025/08/02/1
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html
  • support.apple.com https://support.apple.com/en-us/124149
    Release NotesVendor Advisory
  • support.apple.com https://support.apple.com/en-us/124152
    Release NotesVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.