CVE-2025-24136

This issue was addressed with improved validation of symlinks

Medium · published January 27, 2025

CVSS v3.1
4.4
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A malicious app may be able to create symlinks to protected regions of the disk.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.7th percentile
Published
2025-01-27T21:46Z
EPSS history
Timeline
  • 27 JAN 21:46Z
    This issue was addressed with improved validation of symlinks
    cvelistv5