CVE-2025-24239
published 2025-03-31CVE-2025-24239: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected…
PriorityP335medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.50%
39.6th percentile
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 15.4 | 15.4 |
| apple | macos_sequoia | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x9p8-fww8-8frp: A downgrade issue was addressed with additional code-signing restrictions
ghsa_unreviewed·2025-04-01
CVE-2025-24239 [CRITICAL] CWE-200 GHSA-x9p8-fww8-8frp: A downgrade issue was addressed with additional code-signing restrictions
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
Apple
CVE-2025-24239: macOS Sequoia 15.4
vendor_apple·2025-03-31·CVSS 6.5
CVE-2025-24239 [MEDIUM] CVE-2025-24239: macOS Sequoia 15.4
Apple Security Update: About the security content of macOS Sequoia 15.4
Product: macOS Sequoia
Version: 15.4
CVE: CVE-2025-24239
Component: AppleMobileFileIntegrity
Impact: An app may be able to access protected user data
Description: A downgrade issue was addressed with additional code-signing restrictions.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-31
Published