CVE-2025-43323CWE-200information-disclosure

CVE-2025-43323

High · published November 4, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

⚡ Watch out! This vulnerability lets apps fingerprint you, like a detective piecing together clues from your every move! 🔍 Think of it as a restaurant that secretly monitors your orders and preferences, then uses that info to recognize you even when you’re just grabbing takeout. Just like how a nosy waiter might remember your usual, this flaw allows apps to track your behavior without your consent. An app could potentially track your activities and preferences with enough detail to build a profile of you, which is absolutely daunting! This means your privacy could be compromised and your habits could be exposed to unwanted scrutiny.

Put simply

Think of it as a restaurant that secretly monitors your orders and preferences, then uses that info to recognize you even when you’re just grabbing takeout. Just like how a nosy waiter might remember your usual, this flaw allows apps to track your behavior without your consent. This vulnerability arises from insufficient entitlement checks, enabling applications to potentially collect sensitive user data through fingerprinting techniques, which could lead to privacy invasions.

What to do

An app could potentially track your activities and preferences with enough detail to build a profile of you, which is absolutely daunting! This means your privacy could be compromised and your habits could be exposed to unwanted scrutiny. To protect yourself, update your devices immediately to iOS 26, iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, or watchOS 26. Regularly check for software updates to ensure you have the latest security patches. You've got this! Stay vigilant and keep your devices up to date for a safer experience! 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-11-04T07:15Z
Affected products (5)
ProductVersionsFixed in
apple/ipados< 26.026.0
apple/iphone_os< 26.026.0
apple/tvos< 26.026.0
apple/visionos< 26.026.0
apple/watchos< 26.026.0
References (5)
EPSS history
Timeline
  • 04 NOV 01:16Z
    This issue was addressed with additional entitlement checks
    cvelistv5