CVE-2025-24268
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to access sensitive user data.
Risk Assessment
The organization may be exposed to unauthorized access to user data, potentially leading to information leakage.
Recommendation
It is recommended to update the system to macOS Sequoia 15.4 to mitigate this vulnerability.
Other vulnerabilities in macOS Sequoia
See all- CVE-2025-46293Medium
The issue concerns improper handling of symlinks, which may allow an app to access protected user data. It is fixed in macOS Sequoia 15.4.
- CVE-2025-43278Medium
This issue was addressed with improved handling of symlinks. An app may be able to access protected user data.
- CVE-2025-31272High
The issue was addressed with improved checks. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
- CVE-2025-30459Medium
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4.
- CVE-2025-24284High
This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to break out of its sandbox.
Original NVD description (English source)
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.