CVE-2025-43468

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

• CWE-347

• https://support.apple.com/en-us/125634
• https://support.apple.com/en-us/125635Patch, Vendor Advisory
• https://support.apple.com/en-us/125636Patch, Vendor Advisory

Published

Nov 4, 2025

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43462The issue was addressed with improved memory handling. This …7.5
• CVE-2025-43463A parsing issue in the handling of directory paths was addre…5.5
• CVE-2025-43464A denial-of-service issue was addressed with improved input …6.5
• CVE-2025-43465A parsing issue in the handling of directory paths was addre…5.5
• CVE-2025-43466An injection issue was addressed with improved validation. T…5.5
• CVE-2025-43467This issue was addressed with improved checks. This issue is…7.8
• CVE-2025-43469A permissions issue was addressed with additional restrictio…5.5
• CVE-2025-4347A vulnerability was found in D-Link DIR-600L up to 2.07B01. …9.8
• CVE-2025-43470A permissions issue was addressed with additional restrictio…5.5
• CVE-2025-43471The issue was addressed with improved checks. This issue is …5.5
• CVE-2025-43472A validation issue was addressed with improved input sanitiz…7.8
• CVE-2025-43473This issue was addressed with improved state management. Thi…5.5