CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2025-09-15

Last modified

2026-04-02

Weaknesses

CWE-284

Affected products

• Macos (Apple)

References

• https://support.apple.com/en-us/125110
• http://seclists.org/fulldisclosure/2025/Sep/53