CVE-2025-46310: An attacker with root privileges may be able to delete protected system files in Apple macOS
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An attacker with root privileges may be able to delete protected system files.
AI Analysis
Technical Summary
This vulnerability allows an attacker who already has root privileges on a macOS system to delete protected system files due to insufficient state management. The issue affects multiple macOS versions prior to the fixed releases. Apple has resolved the issue by improving state management in the affected components. The CVSS vector indicates that the attack requires local access with high privileges but no user interaction, and impacts integrity and availability.
Potential Impact
An attacker with root privileges could delete protected system files, potentially causing system instability or denial of service. There is no impact on confidentiality. The vulnerability requires local privileged access, limiting the attack surface to users or processes that already have root-level permissions.
Mitigation Recommendations
This vulnerability is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26. Users and administrators should apply these updates to remediate the issue. Since the vulnerability requires root privileges, limiting root access and following the principle of least privilege also helps reduce risk.
CVE-2025-46310: An attacker with root privileges may be able to delete protected system files in Apple macOS
Description
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An attacker with root privileges may be able to delete protected system files.
CVSS v3.1
Score 6.0medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability allows an attacker who already has root privileges on a macOS system to delete protected system files due to insufficient state management. The issue affects multiple macOS versions prior to the fixed releases. Apple has resolved the issue by improving state management in the affected components. The CVSS vector indicates that the attack requires local access with high privileges but no user interaction, and impacts integrity and availability.
Potential Impact
An attacker with root privileges could delete protected system files, potentially causing system instability or denial of service. There is no impact on confidentiality. The vulnerability requires local privileged access, limiting the attack surface to users or processes that already have root-level permissions.
Mitigation Recommendations
This vulnerability is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26. Users and administrators should apply these updates to remediate the issue. Since the vulnerability requires root privileges, limiting root access and following the principle of least privilege also helps reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2025-04-22T21:13:49.961Z
- State
- PUBLISHED
Threat ID: 698d0dc64b57a58fa1d95112
Added to database: 02/11/2026, 23:16:22 UTC
Last enriched: 05/27/2026, 20:20:58 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 138
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.