CVE-2025-43276

A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Relay may not activate when more than one user is logged in at the same time.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/124149	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

06 Aug 2025, 16:15

Type	Values Removed	Values Added
CWE		CWE-367

01 Aug 2025, 18:29

Type	Values Removed	Values Added
First Time		Apple Apple macos
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.3
CPE		cpe:2.3:o:apple:macos::::::::
CWE		NVD-CWE-noinfo
References	~~() https://support.apple.com/en-us/124149 -~~	() https://support.apple.com/en-us/124149 - Release Notes, Vendor Advisory

31 Jul 2025, 18:42

Type	Values Removed	Values Added
Summary		(es) Se solucionó un error lógico mejorando la gestión de errores. Este problema se solucionó en macOS Sequoia 15.6. Es posible que la retransmisión privada de iCloud no se active si hay más de un usuario conectado simultáneamente.

30 Jul 2025, 00:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-30 00:15

Updated : 2025-08-06 16:15

NVD link : CVE-2025-43276

Mitre link : CVE-2025-43276

CVE.ORG link : CVE-2025-43276

JSON object : View

Products Affected

apple

macos

CWE

NVD-CWE-noinfo CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

{"id": "CVE-2025-43276", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2025-07-30T00:15:38.563", "references": [{"url": "https://support.apple.com/en-us/124149", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-367"}]}], "descriptions": [{"lang": "en", "value": "A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Relay may not activate when more than one user is logged in at the same time."}, {"lang": "es", "value": "Se solucion\u00f3 un error l\u00f3gico mejorando la gesti\u00f3n de errores. Este problema se solucion\u00f3 en macOS Sequoia 15.6. Es posible que la retransmisi\u00f3n privada de iCloud no se active si hay m\u00e1s de un usuario conectado simult\u00e1neamente."}], "lastModified": "2025-08-06T16:15:29.343", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "077E4BB7-4A8B-4D18-BCD7-2938A2B8B9C8", "versionEndExcluding": "15.6"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}