CVE-2025-43240

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-43240
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated.

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/124149 Release Notes Vendor Advisory
https://support.apple.com/en-us/124152 Release Notes Vendor Advisory
http://seclists.org/fulldisclosure/2025/Aug/0
http://seclists.org/fulldisclosure/2025/Jul/32
http://www.openwall.com/lists/oss-security/2025/08/02/1
https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
History

04 Nov 2025, 22:16

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/08/02/1 -

03 Nov 2025, 20:18

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2025/Aug/0 -
  • () http://seclists.org/fulldisclosure/2025/Jul/32 -

03 Nov 2025, 19:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html -

01 Aug 2025, 14:33

Type Values Removed Values Added
References () https://support.apple.com/en-us/124149 - () https://support.apple.com/en-us/124149 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124152 - () https://support.apple.com/en-us/124152 - Release Notes, Vendor Advisory
First Time Apple
Apple macos
Apple safari
CPE cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

31 Jul 2025, 18:15

Type Values Removed Values Added
CWE CWE-703
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.2

30 Jul 2025, 23:15

Type Values Removed Values Added
Summary
  • (es) Se solucionó un problema lógico mejorando las comprobaciones. Este problema se solucionó en macOS Sequoia 15.6. El origen de una descarga podía estar asociado incorrectamente.
Summary (en) A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. A download's origin may be incorrectly associated. (en) A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated.
References
  • () https://support.apple.com/en-us/124152 -

30 Jul 2025, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-30 00:15

Updated : 2025-11-04 22:16

NVD link : CVE-2025-43240

Mitre link : CVE-2025-43240

CVE.ORG link : CVE-2025-43240

JSON object : View

Products Affected

apple

  • safari
  • macos
CWE
CWE-703

Improper Check or Handling of Exceptional Conditions