CVE-2025-43257
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox.
- Affected products
- Apple Macos
- Apple Macos
- < 15.6
- CVSS 3.1
- 8.7 HIGH
- EPSS
- 0.2% (8th percentile)
- Weakness
- CWE-59
- NVD status
- Analyzed
- Published
- 2026-04-02
CVE-2025-43257 at NVD
1 known exploit for CVE-2025-43257
Proof-of-concept code and exploit modules indexed by Sploitus