Description
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | macOS | < 13.7.3, < 14.7.3, < 15.3 | 13.7.3 |
Advisories 2
- WID-SEC-2025-0201 Apple macOS, iPadOS und iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 23, 2025
- NCSC-2025-0032 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Jan 28, 2025