CVE-2025-43362

The issue was addressed with improved checks

Critical · published September 15, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

🚨 A keystroke monitoring bug is lurking, allowing apps to snoop on what you type, without so much as a heads-up! 🔥 This vulnerability is like having an uninvited guest in your home, eavesdropping on your conversations while you think you're protected behind closed doors. Just like you wouldn’t want someone writing down your every secret, this flaw lets apps watch every keystroke you make! An attacker could potentially harvest sensitive information such as passwords, credit card numbers, and personal messages, putting your privacy at serious risk. This could lead to identity theft or unauthorized access to your accounts, making it absolutely devastating for anyone affected!

Put simply

This vulnerability is like having an uninvited guest in your home, eavesdropping on your conversations while you think you're protected behind closed doors. Just like you wouldn’t want someone writing down your every secret, this flaw lets apps watch every keystroke you make! The vulnerability arises because an app can monitor keystrokes without proper user permission, indicating a lack of adequate checks in the system. This flaw has been addressed in iOS 18.7 and iPadOS 18.7, and subsequent versions.

What to do

An attacker could potentially harvest sensitive information such as passwords, credit card numbers, and personal messages, putting your privacy at serious risk. This could lead to identity theft or unauthorized access to your accounts, making it absolutely devastating for anyone affected! To protect yourself, promptly update your devices to iOS 18.7 or iPadOS 18.7 (or later) to eliminate this risk. Regularly check for updates and consider reviewing app permissions for additional peace of mind. You've got this! Follow these steps and ensure your device stays safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01098 · 65.4th percentile
Published
2025-09-15T22:35Z
EPSS history
Timeline
  • 15 SEP 22:35Z
    The issue was addressed with improved checks
    cvelistv5