---
id: CVE-2025-43463
title: >-
  A parsing issue in the handling of directory paths was addressed with improved
  path validation
summary: >-
  A parsing issue in the handling of directory paths was addressed with improved
  path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma
  14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data.
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
  - CWE-22
vendor: apple
product: macos
affected:
  - macos < 14.8.3
  - 'macos >= 15.0, < 15.7.3'
  - 'macos >= 26.0, < 26.1'
patched:
  - macos 26.1
published: '2025-12-12'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T20:10:01.970'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-43463'
references:
  - url: 'https://support.apple.com/en-us/125634'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/125887'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/125888'
    label: product-security@apple.com
tags:
  - nvd
epss: 0.00216
epssPercentile: 0.11016
ingestedAt: '2026-10-07T20:46:46.914Z'
---

## Overview

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data.

## Affected

- `macos < 14.8.3`
- `macos >= 15.0, < 15.7.3`
- `macos >= 26.0, < 26.1`

## Remediation

Upgrade past the affected range:

- `macos 26.1`