CVE-2025-43257
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Improved symlink handling in macOS Sequoia 15.6 prevents an app from breaking out of its sandbox.
Risk Assessment
An app can escape the sandbox and gain unauthorized access to the system, potentially leading to data confidentiality and integrity breaches.
Recommendation
Update macOS to Sequoia 15.6 or later.
Other vulnerabilities in macOS
See all- CVE-2026-39870High
The issue was addressed with improved memory handling. Exploitation of this vulnerability may lead to process memory corruption when processing a maliciously crafted image.
- CVE-2026-28915High
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.
- CVE-2026-65400CriticalActively exploited
An authentication issue was addressed with improved state management. This issue affects macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, and macOS Tahoe 26.6.1. A network attacker may be able to authenticate to Screen Sharing without valid credentials.
- CVE-2026-43773Critical
An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43764Critical
An integer overflow was addressed with improved input validation. An app may cause unexpected system termination.
- CVE-2026-43750Critical
A buffer overflow in macOS allows an app to execute arbitrary code out of its sandbox or with elevated privileges. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.
- CVE-2026-43748Critical
An out-of-bounds write issue in macOS may cause unexpected system termination by an app. This is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.
- CVE-2026-43710Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an attacker to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.
- CVE-2026-43694Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an app to cause unexpected system termination or write kernel memory. Fixed with improved memory handling.
- CVE-2026-43682Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a remote user to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.
Original NVD description (English source)
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox.