cbcvebase.
CVE-2025-43468
published 2025-11-04

CVE-2025-43468: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2…

PriorityP426medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.11%
1.8th percentile
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

Affected

7 ranges
VendorProductVersion rangeFixed in
applemacos< 15.7.215.7.2
applemacos< 26.126.1
applemacos< 14.8.214.8.2
applemacos>= 15.0 < 15.7.215.7.2
applemacos_sequoia
applemacos_sonoma
applemacos_tahoe
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.