Product:
macOS
Summary
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue may allow an app to access sensitive user data. The problem has been fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43314 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that can manipulate directory paths. The attacker would then need to convince a user to run this application, which could lead to unauthorized access to sensitive user data. The attack requires local access to the system and user interaction to execute the malicious application.
Affected Products
- macOS Sequoia 15.7: Fixed the parsing issue with improved path validation.
- macOS Sonoma 14.8: Addressed the vulnerability to prevent unauthorized data access.
- macOS Tahoe 26: Resolved the directory path handling issue to enhance security.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions where the issue has been fixed. Additionally, users should be cautious about running applications from untrusted sources to minimize the risk of exploitation.