{
  "fix": "Sequoia 15.7.3",
  "url": "https://patchblox.com/security/fix/macos/sequoia-15.7.3",
  "summary": "Sequoia 15.7.3, released December 12, 2025, fixes 25 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sequoia 15.7.3",
  "released": "2025-12-12T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-46287, rated Critical",
  "supported": true,
  "cveCount": 25,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.20217,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/125887",
  "appliesTo": [
    {
      "product": "Sequoia",
      "productUrl": "https://patchblox.com/security/product/macos/sequoia",
      "fixedVersion": "15.7.3",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-46287",
      "url": "https://patchblox.com/security/cve/CVE-2025-46287",
      "title": "Calling Framework: An attacker may be able to spoof their FaceTime caller ID",
      "component": "Call History",
      "impact": "An attacker may be able to spoof their FaceTime caller ID",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43416",
      "url": "https://patchblox.com/security/cve/CVE-2025-43416",
      "title": "sudo: An app may be able to access protected user data",
      "component": "sudo",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-7264",
      "url": "https://patchblox.com/security/cve/CVE-2024-7264",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 7.5,
      "epss": 0.20217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43539",
      "url": "https://patchblox.com/security/cve/CVE-2025-43539",
      "title": "AppleJPEG: Processing a file may lead to memory corruption",
      "component": "AppleJPEG",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.06155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9086",
      "url": "https://patchblox.com/security/cve/CVE-2025-9086",
      "title": "Out of bounds read for cookie path",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.01463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43542",
      "url": "https://patchblox.com/security/cve/CVE-2025-43542",
      "title": "FaceTime: Password fields may be unintentionally revealed when remotely controlling a device over FaceTime",
      "component": "FaceTime",
      "impact": "Password fields may be unintentionally revealed when remotely controlling a device over FaceTime",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00857,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43519",
      "url": "https://patchblox.com/security/cve/CVE-2025-43519",
      "title": "SoftwareUpdate: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00335,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46285",
      "url": "https://patchblox.com/security/cve/CVE-2025-46285",
      "title": "Kernel: An app may be able to gain root privileges",
      "component": "Kernel",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43320",
      "url": "https://patchblox.com/security/cve/CVE-2025-43320",
      "title": "AppleMobileFileIntegrity: An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43512",
      "url": "https://patchblox.com/security/cve/CVE-2025-43512",
      "title": "Kernel: An app may be able to elevate privileges",
      "component": "Kernel",
      "impact": "An app may be able to elevate privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43527",
      "url": "https://patchblox.com/security/cve/CVE-2025-43527",
      "title": "StorageKit: An app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-5918",
      "url": "https://patchblox.com/security/cve/CVE-2025-5918",
      "title": "Libarchive: reading past eof may be triggered for piped file streams",
      "component": "libarchive",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 6.6,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43532",
      "url": "https://patchblox.com/security/cve/CVE-2025-43532",
      "title": "Foundation: Processing malicious data may lead to unexpected app termination",
      "component": "Foundation",
      "impact": "Processing malicious data may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43530",
      "url": "https://patchblox.com/security/cve/CVE-2025-43530",
      "title": "VoiceOver: An app may be able to access sensitive user data",
      "component": "VoiceOver",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43463",
      "url": "https://patchblox.com/security/cve/CVE-2025-43463",
      "title": "StorageKit: An app may be able to access sensitive user data",
      "component": "StorageKit",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43509",
      "url": "https://patchblox.com/security/cve/CVE-2025-43509",
      "title": "Networking: An app may be able to access sensitive user data",
      "component": "Networking",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46289",
      "url": "https://patchblox.com/security/cve/CVE-2025-46289",
      "title": "AppSandbox: An app may be able to access protected user data",
      "component": "AppSandbox",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43482",
      "url": "https://patchblox.com/security/cve/CVE-2025-43482",
      "title": "Audio: An app may be able to cause a denial-of-service",
      "component": "Audio",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43513",
      "url": "https://patchblox.com/security/cve/CVE-2025-43513",
      "title": "MDM Configuration Tools: An app may be able to read sensitive location information",
      "component": "MDM Configuration Tools",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46276",
      "url": "https://patchblox.com/security/cve/CVE-2025-46276",
      "title": "Messages: An app may be able to access sensitive user data",
      "component": "Messages",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43517",
      "url": "https://patchblox.com/security/cve/CVE-2025-43517",
      "title": "Call History: An app may be able to access protected user data",
      "component": "Call History",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43516",
      "url": "https://patchblox.com/security/cve/CVE-2025-43516",
      "title": "Voice Control: A user with Voice Control enabled may be able to transcribe another user\u0027s activity",
      "component": "Voice Control",
      "impact": "A user with Voice Control enabled may be able to transcribe another user\u0027s activity",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43518",
      "url": "https://patchblox.com/security/cve/CVE-2025-43518",
      "title": "Foundation: An app may be able to inappropriately access files through the spellcheck API",
      "component": "Foundation",
      "impact": "An app may be able to inappropriately access files through the spellcheck API",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43521",
      "url": "https://patchblox.com/security/cve/CVE-2025-43521",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43522",
      "url": "https://patchblox.com/security/cve/CVE-2025-43522",
      "title": "AppleMobileFileIntegrity: An app may be able to access user-sensitive data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}