CVE-2025-43257 in macOS

Riassunto

di MITRE • 02/04/2026

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: Apple
• Prenotare: 16/04/2025
• Divulgazione: 02/04/2026
• Moderazione: accettato
• Voce: VDB-355039
• CPE: pronto
• CWE: CWE-61 (confermato)
• CVSS: 8.7 (CISA-ADP)
• EPSS: 0.00181
• KEV: no
• Attività: molto basso
• Settore: Police, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-43257
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-43257
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-43257/