CVE-2025-43257

Description

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox.

Risk Information

Base Score
8.7
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
EPSS Score
Exploitation Probability
0.0

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.6 (Software Update) (Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.6.1 (Software Update) (Auto Reboot)(CVE-2025-43300)Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234