CVE-2025-43314: An app may be able to access sensitive user data in Apple macOS
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
CVE-2025-43314: An app may be able to access sensitive user data in Apple macOS
Description
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- apple
- Date Reserved
- 2025-04-16T15:24:37.106Z
- Cvss Version
- null
- State
- PUBLISHED
Threat ID: 68c8aa6eee2781683eebd61d
Added to database: 9/16/2025, 12:08:14 AM
Last updated: 9/16/2025, 12:08:14 AM
Views: 1
Related Threats
CVE-2025-10429: SQL Injection in SourceCodester Pet Grooming Management Software
MediumCVE-2025-10440: OS Command Injection in D-Link DI-8100
MediumCVE-2025-10428: Unrestricted Upload in SourceCodester Pet Grooming Management Software
MediumCVE-2025-59328: CWE-502 Deserialization of Untrusted Data in Apache Software Foundation Apache Fory
MediumCVE-2025-10436: SQL Injection in Campcodes Computer Sales and Inventory System
MediumActions
Need enhanced features?
Contact root@offseq.com for Pro access with improved analysis and higher rate limits.