CVE-2025-43399CWE-359

CVE-2025-43399

High · published November 4, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

⚡ An app can potentially access your protected user data due to insufficient redaction — think of it as a restaurant serving your meal with someone else's name on the receipt! 🍽️ Imagine dining out and receiving a bill that reveals not only your order but also the names and details of other patrons — that’s the risk here. This vulnerability allows apps to snoop on sensitive user information like a nosy waiter peeking at other tables! An attacker could exploit this oversight to access sensitive user data, leading to unauthorized exposure of private information. While there’s no known exploitation at this time, the potential for misuse is undeniably concerning!

Put simply

Imagine dining out and receiving a bill that reveals not only your order but also the names and details of other patrons — that’s the risk here. This vulnerability allows apps to snoop on sensitive user information like a nosy waiter peeking at other tables! This vulnerability arises from the inadequate redaction of sensitive information in applications, which allows unauthorized access to protected user data under certain conditions.

What to do

An attacker could exploit this oversight to access sensitive user data, leading to unauthorized exposure of private information. While there’s no known exploitation at this time, the potential for misuse is undeniably concerning! To protect yourself, update your devices to the latest versions: iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, or macOS Tahoe 26.1. Regularly check for updates on your Apple devices to ensure you’re safeguarded! You've got this! Stay proactive and keep your devices updated to maintain your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00591 · 47.5th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2025-11-04T07:15Z
Affected products (1)
ProductVersionsFixed in
apple/macos< 15.7.215.7.2
References (3)
EPSS history
Timeline
  • 04 NOV 01:16Z
    This issue was addressed with improved redaction of sensitive information
    cvelistv5