Skip to content
OpenAdvisories
High · 8.8 CVE-2025-24254 EUVD-2025-8951GHSA-6p7v-mm3j-hhhh

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventur…

Published Mar 31, 2025 · Updated Apr 2, 2026 · Assigned by apple

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.

Affected products

VendorProductAffectedFixed
Apple macOS < 13.7.5, < 14.7.5, < 15.4 13.7.5

Advisories 2

References