CVE-2025-46293
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
The issue concerns improper handling of symlinks, which may allow an app to access protected user data. It is fixed in macOS Sequoia 15.4.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive user data, potentially leading to privacy and security breaches.
Recommendation
It is recommended to update the system to macOS Sequoia 15.4 to mitigate this vulnerability.
Other vulnerabilities in macOS Sequoia
See all- CVE-2025-43278Medium
This issue was addressed with improved handling of symlinks. An app may be able to access protected user data.
- CVE-2025-31272High
The issue was addressed with improved checks. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
- CVE-2025-30459Medium
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4.
- CVE-2025-24284High
This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to break out of its sandbox.
- CVE-2025-24268Medium
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to access sensitive user data.
Original NVD description (English source)
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.