A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data.
Weakness
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Macos | Apple | 14.0 (including) | 14.8.5 (excluding) |
| Macos | Apple | 15.0 (including) | 15.7.5 (excluding) |
| Macos | Apple | 26.0 (including) | 26.3 (excluding) |