CVE-2025-43417: Apple macOS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access user-sensitive data.

Affected products

• Apple macOS: before 14.8.4 (fixed in 14.8.4)

Published 2026-02-11. Last modified 2026-08-21.