CVE-2025-43296
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.
Risk Assessment
Bypassing Gatekeeper allows an unsigned or untrusted application to run without system warnings, increasing the risk of malware infection. This affects macOS Tahoe 26 users.
Recommendation
Update macOS Tahoe 26 to the version containing the fix and avoid running applications from untrusted sources.
Other vulnerabilities in macOS Tahoe
See all- CVE-2026-43652High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2026-28976High
An information leakage was addressed with additional validation in macOS Tahoe 26.5, which could allow an app to gain root privileges.
- CVE-2026-28930High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2025-46315High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2025-46313Medium
A logging issue was addressed with improved data redaction. An app may be able to access sensitive user data.
- CVE-2025-43339Medium
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1.
Original NVD description (English source)
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS