CVE-2025-43195

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

Affected products

Apple Macos

Apple Macos

< 13.7.7, 14.7.7, 15.6

CVSS 3.1

5.5 MEDIUM

EPSS

0.2% (11th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2025-07-29