CVE-2025-30459
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4.
Risk Assessment
An app may be able to access sensitive user data, posing a privacy risk.
Recommendation
It is recommended to update to macOS Sequoia 15.4 to eliminate the vulnerability.
Other vulnerabilities in macOS Sequoia 15.4
See all- CVE-2025-46293Medium
The issue concerns improper handling of symlinks, which may allow an app to access protected user data. It is fixed in macOS Sequoia 15.4.
- CVE-2025-43278Medium
This issue was addressed with improved handling of symlinks. An app may be able to access protected user data.
- CVE-2025-31272High
The issue was addressed with improved checks. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
- CVE-2025-24284High
This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to break out of its sandbox.
- CVE-2025-24268Medium
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to access sensitive user data.
Original NVD description (English source)
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS