Downgrade Issue in macOS Sequoia, Sonoma, and Ventura by Apple
CVE-2025-43245

9.8CRITICAL

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43245?

A downgrade vulnerability has been identified in macOS that allows an application to potentially access protected user data due to insufficient code-signing restrictions. This issue has been addressed in newer versions of macOS, specifically Sequoia 15.6, Sonoma 14.7.7, and Ventura 13.7.7. Users are encouraged to upgrade to these versions to mitigate the risk of unauthorized data access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

macOS < 15.6

macOS < 14.7

macOS < 13.7

References

https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124150
https://support.apple.com/en-us/124151

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.