GHSA-xm97-jwxx-3wfh

GHSA-xm97-jwxx-3wfh PUBLISHED CVSS 4.400000095367432 MEDIUM

Record from GitHub Advisory Database · Published November 4, 2025

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app with root privileges may be able to access private information.

Risk scores

CVSS 3.1

4.400000095367432

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Timeline

Nov 4, 2025 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-xm97-jwxx-3wfh
vulnetix vdb fixes GHSA-xm97-jwxx-3wfh

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-xm97-jwxx-3wfh/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2025-43336 advisory
https://support.apple.com/en-us/125635 advisory
https://support.apple.com/en-us/125636 advisory
https://support.apple.com/en-us/125634 advisory

Look up in the Resolve Platform →