CVE-2025-43252: Apple macOS

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A website may be able to access sensitive user data when resolving symlinks.

Affected products

• Apple macOS: before 15.6 (fixed in 15.6)

Published 2025-07-30. Last modified 2026-06-17.