PT-2025-55368 · Apple · Apple Macos

Published 2025-03-31 · Updated 2026-06-11 · CVE-2025-46293

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.4

Description An app may be able to access protected user data due to improper handling of symlinks (symbolic links), which are files that act as pointers to other files or directories.

Recommendations Update to macOS Sequoia 15.4.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2025-46293

Affected Products

Apple Macos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-46293 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46293 · Note
• https://support.apple.com/en-us/122373 · Note