Skip to content
OpenAdvisories
Medium · 4.4 CVE-2025-24136 EUVD-2025-3644GHSA-wc57-w9rc-p4g6

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventur…

Published Jan 27, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A malicious app may be able to create symlinks to protected regions of the disk.

Affected products

VendorProductAffectedFixed
Apple macOS < 13.7.3, < 14.7.3, < 15.3 13.7.3

Advisories 2

References