CVE-2025-43240

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-43240
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated.

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/124149 Release Notes Vendor Advisory
https://support.apple.com/en-us/124152 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
History

01 Aug 2025, 14:33

Type Values Removed Values Added
CPE cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
First Time Apple
Apple macos
Apple safari
References () https://support.apple.com/en-us/124149 - () https://support.apple.com/en-us/124149 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124152 - () https://support.apple.com/en-us/124152 - Release Notes, Vendor Advisory

31 Jul 2025, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.2
CWE CWE-703

30 Jul 2025, 23:15

Type Values Removed Values Added
References
  • () https://support.apple.com/en-us/124152 -
Summary
  • (es) Se solucionó un problema lógico mejorando las comprobaciones. Este problema se solucionó en macOS Sequoia 15.6. El origen de una descarga podía estar asociado incorrectamente.
Summary (en) A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. A download's origin may be incorrectly associated. (en) A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated.

30 Jul 2025, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-30 00:15

Updated : 2025-08-01 14:33

NVD link : CVE-2025-43240

Mitre link : CVE-2025-43240

CVE.ORG link : CVE-2025-43240

JSON object : View

Products Affected

apple

  • safari
  • macos
CWE
CWE-703

Improper Check or Handling of Exceptional Conditions