CVE-2025-43468

Опубликовано: 04 нояб. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data.

Ссылки

https://support.apple.com/en-us/125634
https://support.apple.com/en-us/125635
Patch
Vendor Advisory
https://support.apple.com/en-us/125636
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 14.8.2 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 15.0 (включая) до 15.7.2 (исключая)

EPSS

Процентиль: 0%

0.00007

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-347

Связанные уязвимости

GHSA-849v-5927-j7jq

CVSS3: 7.5

github

3 месяца назад

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data.