CVE-2025-43408 | THREATINT

Description

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An attacker with physical access may be able to access contacts from the lock screen.

PUBLISHED Reserved 2025-04-16 | Published 2025-11-04 | Updated 2025-12-17 | Assigner apple

Problem types

An attacker with physical access may be able to access contacts from the lock screen

Product status

Any version before 14.8

affected

Any version before 26.1

affected

Any version before 15.7

affected

References

support.apple.com/en-us/125636

support.apple.com/en-us/125634

support.apple.com/en-us/125635

cve.org (CVE-2025-43408)

nvd.nist.gov (CVE-2025-43408)

Download JSON