CVE-2025-14714
Gravedad CVSS v4.0:
BAJA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/12/2025
Última modificación:
15/12/2025
Descripción
*** Pendiente de traducción *** An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle<br />
<br />
<br />
<br />
<br />
By executing the bundled interpreter directly the attacker&#39;s scripts run with the application&#39;s TCC privileges<br />
<br />
<br />
<br />
<br />
In fixed versions parent-constraints are used to allow only the main application to launch interpreter with those permissions<br />
<br />
This issue affects LibreOffice on macOS: from 25.2 before