CVE-2025-31198

This issue was addressed with improved validation of symlinks

Medium · published May 29, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A path handling issue was addressed with improved validation.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Published
2025-05-29T21:34Z
EPSS history
Timeline
  • 29 MAY 21:34Z
    This issue was addressed with improved validation of symlinks
    cvelistv5