CVE-2025-65741

Critical · 9.8

CVSS

9.8

EPSS

0.5%

Published

Dec 9, 2025

CISA due date

—

The record

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application.

Affected packages

Ecosystem	Package	Introduced	Fixed