CVE-2025-43331

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.

Score

CVSS 3.1 4.0 Medium

Status

Modified - product-security@apple.com

Published

2025-09-15

Last modified

2026-04-02

Weaknesses

CWE-862

Affected products

• Macos (Apple)

References

• https://support.apple.com/en-us/125110
• http://seclists.org/fulldisclosure/2025/Sep/53