Product:
macOS Tahoe
Summary
This issue was addressed with improved handling of symlinks. An app may be able to access protected user data. The vulnerability could lead to unauthorized access to sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43369 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that takes advantage of the symlink handling issue. By tricking a user into executing the app, the attacker could gain access to protected user data without the user’s consent.
Affected Products
- macOS Tahoe: The latest version addresses the symlink handling issue.
Mitigation
To mitigate this vulnerability, users should ensure they are running the latest version of macOS Tahoe, which includes the necessary security updates to handle symlinks properly and protect user data.