PT-2025-31316 · Apple+9 · Apple Macos+9

Syarif Muhammad Sajjad · Published 2025-07-29 · Updated 2025-11-25 · CVE-2025-43240

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.6

Description A logic issue existed due to insufficient checks, potentially leading to incorrect association of a download’s origin.

Recommendations Update to macOS version 15.6.

Fix

Weakness Enumeration

CWE-703

Related Identifiers

ALSA-2025:13780

ALSA-2025:13782

BDU:2025-11471

CESA-2025_13780

CVE-2025-43240

DLA-4276-1

DSA-5978-1

INFSA-2025_13780

INFSA-2025_13782

MGASA-2025-0313

RHSA-2025:13780

RHSA-2025:13782

RHSA-2025:14421

RHSA-2025:14422

RHSA-2025:14423

RHSA-2025:14432

RHSA-2025:14433

RHSA-2025:14434

RHSA-2025:14486

RHSA-2025_13780

RHSA-2025_13782

SUSE-SU-2025:02765-1

SUSE-SU-2025:02766-1

SUSE-SU-2025:02777-1

SUSE-SU-2025:02973-1

SUSE-SU-2025_02765-1

SUSE-SU-2025_02766-1

SUSE-SU-2025_02777-1

SUSE-SU-2025_02973-1

USN-7702-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Suse

Ubuntu

References · 112

• https://errata.almalinux.org/9/ALSA-2025-13782.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-13780.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0313.html · Security Note
• https://ubuntu.com/security/CVE-2025-6558 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02973-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-43240 · Vendor Advisory
• https://support.apple.com/en-us/124152 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-31273 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43240 · Security Note
• https://ubuntu.com/security/CVE-2025-43216 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0313 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7702-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43228 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43212 · Vendor Advisory