Symlink Validation Flaw in visionOS and macOS by Apple

CVE-2025-43379

What is CVE-2025-43379?

A validation issue involving symbolic links was discovered that could potentially allow unauthorized access to protected user data on Apple devices. This vulnerability affects several versions of Apple's operating systems, necessitating updates to ensure user data remains secure. Improvements have been made in the validation process of symlinks across various systems, including visionOS and macOS, aimed at mitigating this risk.

References