Description
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6Attack Vector: Local
Complexity: Low
Privileges: Low
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None
Affected Packages2 packages
🔴Vulnerability Details
2GHSAGHSA-jhmj-6p8j-qhqc: A parsing issue in the handling of directory paths was addressed with improved path validation↗2025-11-04 CVEListCVE-2025-43382: A parsing issue in the handling of directory paths was addressed with improved path validation↗2025-11-04 📋Vendor Advisories
4AppleCVE-2025-43382: macOS Sonoma 14.8.2↗2025-11-03 AppleCVE-2025-43382: macOS Sequoia 15.7.2↗2025-11-03 AppleCVE-2025-43382: macOS Tahoe 26.1↗2025-11-03 OracleOracle Oracle Analytics Risk Matrix: XML Services (Snowflake JDBC) — CVE-2024-43382↗2025-01-15