Vulnerabilities

TI-2025-28223 CVE-2025-43522 · GHSA-rjjj-vg83-2j3w

Improper signature verification in Apple macOS

LOW 15

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00116 Published 2025-12-12 Fixed in 15.7.3, 26.2 CWE-347

TI-2025-28240 CVE-2025-43542 · GHSA-cc4h-r4x5-p77q

MEDIUM 40

This issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00857 Published 2025-12-12 Fixed in 18.7.3, 26.2 +1 CWE-200

TI-2025-28224 CVE-2025-43523 · GHSA-jwqp-m44c-cw7x

LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00187 Published 2025-12-12 Fixed in 15.7.3, 26.2 CWE-200

TI-2025-28227 CVE-2025-43527 · GHSA-hr7m-hf2x-j4vh

LOW 35

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2025-12-12 Fixed in 15.7.3, 26.2 CWE-280

TI-2025-28222 CVE-2025-43521 · GHSA-cx5h-j8w3-whpr

LOW 24

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00132 Published 2025-12-12 Fixed in 15.7.3, 26.2 CWE-347