CVE-2025-43390
AppleMobileFileIntegrity: An app may be able to access user-sensitive data
CVE-2025-43390 is fixed in 2 products on 1 platform, first by Sequoia 15.7.2, released November 3, 2025. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
MEDIUM
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0014
3rd percentile
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| macOS | |||
| Sequoia | 15.7.2 | Sequoia 15.7.2 | Nov 3, 2025 |
| Tahoe | 26.1 | Tahoe 26.1 | Nov 3, 2025 |