Description
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.
Published: 2025-01-27
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation & File System Modification
Action: Update
AI Analysis

Impact

An application can modify protected parts of the file system on Intel-based Macs due to a downgrade issue that bypassed code‑signing restrictions. The flaw allows the writing of data outside the intended region, potentially overwriting critical system files. This amounts to a privilege escalation and integrity breach, enabling an attacker to install or modify software with elevated privileges.

Affected Systems

Apple macOS on Intel-based machines. The vulnerability is corrected in macOS Sequoia 15.3, macOS Sonoma 14.7.3 and macOS Ventura 13.7.3. Devices running earlier versions of these releases are susceptible.

Risk and Exploitability

The CVSS score of 5.5 places the issue in the moderate severity range. The EPSS score of less than 1 % indicates a very low exploitation probability at the time of this analysis. The vulnerability is not listed in the CISA KEV catalog. The most likely attack vector is the installation of a malicious or compromised application, which can then write through the out‑of‑bounds write flaw to protected areas of the file system. The risk is mostly theoretical unless an attacker obtains a foothold via a malicious app.

Generated by OpenCVE AI on April 28, 2026 at 22:51 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest macOS update—Sequoia 15.3, Sonoma 14.7.3 or Ventura 13.7.3—to obtain the fix for the downgrade issue
  • Restart the system following the update to ensure the updated code‑signing restrictions are active
  • Configure Gatekeeper to allow only apps from the App Store or identified developers and use a policy to prevent installation of third‑party apps that bypass code‑signing restrictions

Generated by OpenCVE AI on April 28, 2026 at 22:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-3633 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.
History

Tue, 28 Apr 2026 23:15:00 +0000

Type Values Removed Values Added
Title MacOS File System Downgrade Privilege Escalation on Intel-Based Macs

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system. A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.

Mon, 03 Nov 2025 21:30:00 +0000


Mon, 24 Mar 2025 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Mon, 24 Mar 2025 17:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}


Tue, 18 Feb 2025 20:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}


Tue, 28 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 27 Jan 2025 22:00:00 +0000

Type Values Removed Values Added
Description A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:15:20.774Z

Reserved: 2025-01-17T00:00:44.971Z

Link: CVE-2025-24122

cve-icon Vulnrichment

Updated: 2025-11-03T21:02:25.655Z

cve-icon NVD

Status : Modified

Published: 2025-01-27T22:15:17.323

Modified: 2026-04-02T19:19:03.037

Link: CVE-2025-24122

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T23:00:13Z

Weaknesses