CVE-2025-46278

Medium · 5.5

CVSS

5.5

EPSS

0.2%

Published

Dec 17, 2025

CISA due date

—

The record

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.

Ecosystem	Package	Introduced	Fixed