CVE Vulnerabilities

CVE-2025-43245

Authentication Bypass by Spoofing

Published: Jul 30, 2025 | Modified: Jul 31, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data.

Weakness

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Affected Software

Name Vendor Start Version End Version
Macos Apple * 13.7.7 (excluding)
Macos Apple 14.0 (including) 14.7.7 (excluding)
Macos Apple 15.0 (including) 15.6 (excluding)

References