CVE-2025-43257 - Vulnerability Analysis

Overview

Apple macOS Sequoia 15.6 contains a sandbox escape caused by improper handling of symlinks, letting apps break out of their sandbox, exploit requires app execution within sandbox.

Severity & Score

Impact

An app can break out of its sandbox, potentially leading to privilege escalation or unauthorized access.

Mitigation

Update to macOS Sequoia 15.6 or later.

References

• https://support.apple.com/en-us/124149

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 3, 2026

🟠 CVE-2025-43257 - High (8.7) This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-43257/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner