CVE-2025-43331

EUVD-2025-29352 · Published Sep 15, 2025

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.

Technologies

Apple Macos

Weaknesses

CWE-862

CVSS scores

v3.14.0CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Persistence Privilege Escalation Stealth Defense Impairment Credential Access

T1068Exploitation for Privilege Escalation T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process

References

https://support.apple.com/en-us/125110
http://seclists.org/fulldisclosure/2025/Sep/53

Potentially impacted assets

See if this affects your attack surface