Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update :

CVE in Dock

Dock
Available for: macOS Tahoe
Impact: An app may be able to access sensitive user data
Description: A race condition was addressed with improved state handling.

CVE-2025-43420: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

CVE in SoftwareUpdate

SoftwareUpdate
Available for: macOS Tahoe
Impact: An app with root privileges may be able to access private information
Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43336: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

CVE in StorageKit

StorageKit
Available for: macOS Tahoe
Impact: An app may be able to access protected user data
Description: A permissions issue was addressed with additional restrictions.

CVE-2025-43351: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

Links

• Apple Security Advisory macOS Tahoe 26.1
• Apple Security Advisory macOS Sequoia 15.7.2
• Apple Security Advisory macOS Sonoma 14.8.2
• NIST entry CVE-2025-43420
• NIST entry CVE-2025-43336
• NIST entry CVE-2025-43351