High · 7.5 CVE-2024-44175 EUVD-2024-40925GHSA-p7rr-c68v-256j

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be …

Published Oct 28, 2024 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 14.7.1, < 15	14.7.1

Advisories 3

WID-SEC-2024-3291 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 6, 2026
WID-SEC-2024-2154 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 11, 2025
NCSC-2024-0426 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · Oct 30, 2024

References

https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121570

EUVD	v3.1	7.5
CISA-ADP	v3.1	7.5