CVE-2025-30459
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4.
Risk Assessment
An app may be able to access sensitive user data, posing a privacy risk.
Recommendation
It is recommended to update to macOS Sequoia 15.4 to eliminate the vulnerability.
Other vulnerabilities in macOS Sequoia 15.4
See all- CVE-2025-46293Medium
The issue concerns improper handling of symlinks, which may allow an app to access protected user data. It is fixed in macOS Sequoia 15.4.
- CVE-2025-43278Medium
This issue was addressed with improved handling of symlinks. An app may be able to access protected user data.
- CVE-2025-31272High
The issue was addressed with improved checks. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
- CVE-2025-24284High
This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to break out of its sandbox.
- CVE-2025-24268Medium
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to access sensitive user data.
Original NVD description (English source)
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.