CVE-2025-46282

Published: Dec 17, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An app may be able to access sensitive user data.

Affected (2)

Products: Apple: Macos, Safari

Apple

2 products

Macos

Safari

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	Before 26.2
Apple Safari	Before 26.2

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://support.apple.com/en-us/125886

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/125892

Source: product-security@apple.com

Release NotesVendor Advisory

Timeline

No history available yet.