Critical severity9.8NVD Advisory· Published Jul 30, 2025· Updated Jun 17, 2026
CVE-2025-43220
CVE-2025-43220
Description
This issue was addressed with improved validation of symlinks. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <17.7.9
- (no CPE)range: 17.7.9
- (no CPE)range: 0
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <13.7.7
- (no CPE)range: 0
- Range: 15.6
- Range: 14.7.7
- Range: 13.7.7
Patches
Vulnerability mechanics
References
8- support.apple.com/en-us/124148nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124149nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124150nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124151nvdRelease NotesVendor Advisory
- seclists.org/fulldisclosure/2025/Jul/31nvd
- seclists.org/fulldisclosure/2025/Jul/32nvd
- seclists.org/fulldisclosure/2025/Jul/33nvd
- seclists.org/fulldisclosure/2025/Jul/34nvd
News mentions
0No linked articles in our index yet.