CVE-2025-43245

Details

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data.

Affected Packages

macOS:14macOS

Fixed in:

14.7.7

macOS:15macOS

Fixed in:

15.6

References

WEBhttp://seclists.org/fulldisclosure/2025/Jul/32 WEBhttp://seclists.org/fulldisclosure/2025/Jul/33 WEBhttp://seclists.org/fulldisclosure/2025/Jul/34 WEBhttps://support.apple.com/en-us/124149 WEBhttps://support.apple.com/en-us/124150 WEBhttps://support.apple.com/en-us/124151 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-43245

CVE-2025-43245

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline