BaselineWatch
Desk

CVE-2025-43390

5.5 medium SSVC exploitation: none Modified

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 5.5 · appleNVD modified 2026-10-18 21:10

Affected (CPE criteria) 1

  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

References 2