CVEvulnerability
CVE-2025-43439
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-11-04
- Last modified
- 2026-09-26
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-359
Description
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.
Affected configurations
• apple ipados (< 26.1)
• apple iphone os (< 26.1)
Related
Weakness · CWE (1)
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/125632 support.apple.com
- https://support.apple.com/en-us/125633 support.apple.com
- https://support.apple.com/en-us/125638 support.apple.com