Description
The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
Published: 2025-09-15
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Access to protected user data
Action: Apply update
AI Analysis

Impact

The flaw enables an application to launch unsigned services on Intel-based Macs, allowing that service to read protected user data. This is an access‑control weakness that could expose confidential information. The vulnerability is resolved by blocking unsigned service launch. Attackers could potentially install or launch an unsigned service that bypasses normal sandboxing.

Affected Systems

Apple macOS platforms, specifically Intel-based Macs running versions older than macOS Sequoia 15.7, macOS Sonoma 14.8 or macOS Tahoe 26. Users of earlier releases are impacted.

Risk and Exploitability

The CVSS score is 5.5, indicating moderate severity. The EPSS score is below 1%, suggesting a very low likelihood of exploitation, and the flaw is not listed in CISA’s KEV catalog. The attack likely requires local or privileged execution to install or launch an unsigned service, and the remedy is to block unsigned services or apply the latest OS updates.

Generated by OpenCVE AI on April 28, 2026 at 00:09 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest macOS update that removes the vulnerability (Sequoia 15.7, Sonoma 14.8 or Tahoe 26).
  • Configure macOS to prevent unsigned services from launching (e.g., use System Preferences > Security & Privacy > Gatekeeper or command‑line tools to disable unsigned service execution).
  • Review system logs and monitoring tools for any unsigned service activity and quarantine any that are found.

Generated by OpenCVE AI on April 28, 2026 at 00:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-29321 The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
History

Tue, 28 Apr 2026 00:30:00 +0000

Type Values Removed Values Added
Title Unsigned Services on Intel Macs May Access Protected User Data

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data. The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
References

Tue, 04 Nov 2025 02:30:00 +0000

Type Values Removed Values Added
References

Tue, 04 Nov 2025 01:45:00 +0000

Type Values Removed Values Added
Description The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data. The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data.

Mon, 03 Nov 2025 19:30:00 +0000

Type Values Removed Values Added
References

Wed, 17 Sep 2025 14:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Tahoe
Vendors & Products Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Tahoe

Tue, 16 Sep 2025 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 15 Sep 2025 22:45:00 +0000

Type Values Removed Values Added
Description The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
References

Subscriptions

Apple Macos Macos Sequoia Macos Sonoma Macos Tahoe
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:14:50.238Z

Reserved: 2025-04-16T15:24:37.108Z

Link: CVE-2025-43321

cve-icon Vulnrichment

Updated: 2025-11-03T18:11:14.629Z

cve-icon NVD

Status : Modified

Published: 2025-09-15T23:15:35.067

Modified: 2026-04-02T19:20:25.777

Link: CVE-2025-43321

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T00:15:05Z

Weaknesses