CVE-2025-43474: 
macOS vulnerability analysis and mitigation

CVE-2025-43474 is an out-of-bounds read vulnerability in the GPU Drivers component of Apple macOS that can allow an app to cause unexpected system termination or read kernel memory. It was disclosed by Apple on November 3, 2025, and affects macOS Sonoma versions before 14.8.2 and macOS Sequoia versions before 15.7.2. The vulnerability was credited to researcher Murray Mike. It carries a CVSS v3.1 base score of 7.8 (High), assessed by CISA-ADP (Apple Sequoia Advisory, Apple Sonoma Advisory, Apple Tahoe Advisory).

The vulnerability is classified as CWE-125 (Out-of-bounds Read) and resides in the macOS GPU Drivers component. Insufficient input validation allows a low-privileged local app to trigger an out-of-bounds read, potentially leading to kernel memory disclosure or unexpected system termination. The attack vector is local, requires low privileges, and no user interaction, making it exploitable by any app running on the affected system. Apple addressed the issue with improved input validation in the patched releases (Apple Sequoia Advisory, Apple Sonoma Advisory).

Successful exploitation can result in unexpected system termination (denial of service) or unauthorized reading of kernel memory, compromising system confidentiality and availability. A low-privileged local attacker or malicious app could leverage kernel memory disclosure to facilitate further privilege escalation or information gathering. The integrity, confidentiality, and availability impacts are all rated High per the CVSS assessment (Apple Sequoia Advisory, Apple Sonoma Advisory).

There is no public proof-of-concept exploit and no evidence of in-the-wild exploitation at this time. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. The EPSS score is approximately 0.018%, indicating a very low probability of exploitation in the near term (Feedly Intelligence).

Apple has released patches addressing this vulnerability in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. Users should update their macOS installations to these versions or later immediately. As a supplementary measure, organizations should restrict the installation of untrusted or unvetted applications and limit local user privileges to reduce exposure (Apple Sequoia Advisory, Apple Sonoma Advisory, Apple Tahoe Advisory).

The SANS Internet Storm Center noted this vulnerability as part of Apple's November 2025 security update batch. The CIS published an advisory highlighting multiple vulnerabilities in Apple products from this release cycle that could allow for arbitrary code execution. No significant independent researcher commentary or social media discussion specific to CVE-2025-43474 has been identified beyond standard vulnerability tracking and aggregation sites.