Low · 3.3 CVE-2025-43395 EUVD-2025-37717GHSA-5g69-f2mw-5h6c

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe …

Published Nov 4, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 14.8.2, < 15.7.2, < 26.1	14.8.2

Advisories 2

WID-SEC-2025-2475 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
NCSC-2025-0351 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · Nov 4, 2025

References

https://support.apple.com/en-us/125634
https://support.apple.com/en-us/125635
https://support.apple.com/en-us/125636

EUVD	v3.1	3.3
CISA-ADP	v3.1	3.3