CVE-2025-46291

HighCVSS 7.8/10Last modified Aug 21, 2026

Description

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.2. An app may bypass Gatekeeper checks.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

VendorProductVersions
ApplemacOS< 15.7.4; < 26.2

References

Timeline

Published
Dec 17, 2025
Last modified
Aug 21, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-462925.5This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. CVE-2025-462935.5This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protectCVE-2025-462945.3To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDCVE-2025-462959.8Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input iCVE-2025-462965.4An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access adminiCVE-2025-462975.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protecCVE-2025-462986.5The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS CVE-2025-462994.3A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macCVE-2025-463005.7The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS SeCVE-2025-463015.7The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS SeCVE-2025-463025.7The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS SeCVE-2025-463035.7The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Se
CVE-2025-46291: High severity, CVSS 7.8 | Vulnix