Product:
macOS
Summary
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue allows an app to potentially gain root privileges. The vulnerability has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43298 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a local system. By leveraging the parsing issue in directory path handling, the application could manipulate path validation to gain elevated privileges, potentially allowing unauthorized access to system resources.
Affected Products
- macOS Sequoia 15.7: Fixed the parsing issue with improved path validation.
- macOS Sonoma 14.8: Addressed the vulnerability to prevent unauthorized root access.
- macOS Tahoe 26: Implemented security measures to mitigate the parsing issue.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions, specifically Sequoia 15.7, Sonoma 14.8, or Tahoe 26. Regularly applying security updates and patches is essential to protect against potential exploitation.