Medium · 4.4 CVE-2025-24242 EUVD-2025-8968GHSA-892g-82wc-7r8q

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root privileges may be …

Published Mar 31, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root privileges may be able to access private information.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 15.4	15.4

Advisories 2

WID-SEC-2025-0668 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2026
NCSC-2025-0102 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Apr 1, 2025

References

https://support.apple.com/en-us/122373

EUVD	v3.1	4.4
CISA-ADP	v3.1	4.4