← Back to CVEs
CVE-2025-43371
HIGH8.2
Description
This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox.
CVE Details
CVSS v3.1 Score8.2
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published9/15/2025
Last Modified11/3/2025
Sourcenvd
Honeypot Sightings0
Affected Products
apple:xcode
Weaknesses (CWE)
CWE-284
References
https://support.apple.com/en-us/125117(product-security@apple.com)
http://seclists.org/fulldisclosure/2025/Sep/60(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.