PT-2025-37807 · Apple · Macos Sequoia 15.7+3

Published 2025-09-15 · Updated 2025-09-18 · CVE-2025-43298

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26

Description A parsing issue in the handling of directory paths exists. Improved path validation addresses this issue. An application may be able to gain root privileges.

Recommendations Update to macOS Sequoia 15.7 or later. Update to macOS Sonoma 14.8 or later. Update to macOS Tahoe 26 or later.

Fix

Weakness Enumeration

CWE-41

Related Identifiers

BDU:2025-11516

CVE-2025-43298

Affected Products

Apple Macos

Macos Sequoia 15.7

Macos Sonoma 14.8

Macos Tahoe 26

References · 17

• https://support.apple.com/en-us/125110 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/724707 · Security Note
• https://support.apple.com/en-us/125112 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43298 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43298 · Security Note
• https://bdu.fstec.ru/vul/2025-11516 · Security Note
• https://support.apple.com/en-us/125111 · Vendor Advisory
• https://cert.gov.ru/upload/iblock/f6d/f76hzaq0cotogu4shnhxbl103cdn15nh/VULN.2025_09_22.1.pdf · Note
• https://support.apple.com/ru-ru/125111 · Note
• http://seclists.org/fulldisclosure/2025/Sep/53 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43298 · Note
• http://seclists.org/fulldisclosure/2025/Sep/55 · Note
• https://support.apple.com/ru-ru/125112 · Note
• https://twitter.com/Samuel257196756/status/1968516142567223336 · Twitter Post
• https://support.apple.com/ru-ru/125110 · Note