CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions

Medium · published July 29, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Published
2025-07-29T23:35Z
EPSS history
Timeline
  • 29 JUL 23:35Z
    A downgrade issue was addressed with additional code-signing restrictions
    cvelistv5