CVEvulnerability
CVE-2025-43357
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2025-09-15
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-359
Description
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to fingerprint the user.
Affected configurations
• apple ipados (< 26.0)
• apple iphone os (< 26.0)
• apple macos (< 26.0)
Related
Weakness · CWE (1)
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/125108 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/125109 support.apple.com
- https://support.apple.com/en-us/125110 support.apple.com
- https://support.apple.com/en-us/125111 support.apple.com
- https://support.apple.com/en-us/125112 support.apple.com
- http://seclists.org/fulldisclosure/2025/Sep/49 seclists.org
- http://seclists.org/fulldisclosure/2025/Sep/53 seclists.org