PT-2025-55362 · Apple · Macos Sequoia

Published 2025-03-31 · Updated 2026-06-11 · CVE-2025-24268

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.4

Description A parsing issue in the handling of directory paths could allow an application to access sensitive user data. This was addressed by implementing improved path validation.

Recommendations Update to macOS Sequoia 15.4.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-24268

Affected Products

Macos Sequoia

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-24268 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24268 · Note
• https://support.apple.com/en-us/122373 · Note