CVE-2025-43390

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Nov 4, 2025

CISA due date

—

The record

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

Affected packages

Ecosystem	Package	Introduced	Fixed