CVE-2025-43449

The issue was addressed with improved handling of caches

High · published November 4, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

⚡ A sneaky app could follow you around like a shadow between installs! With CVE-2025-43449, users’ privacy is at risk as malicious applications may track movements across different installations. 🔍 Think of it like a restaurant that saves your dining habits even after you’ve changed locations — the waitstaff remembers your preferences, whether you like it or not! This vulnerability allows apps to keep tabs on you just like that, tracking your behavior even when you think you’ve moved on. If an attacker exploits this, they could gather data on your usage patterns, preferences, and habits without your consent or knowledge. This could lead to targeted advertising or worse, unauthorized data collection. The invasion of privacy here could be absolutely devastating!

Put simply

Think of it like a restaurant that saves your dining habits even after you’ve changed locations — the waitstaff remembers your preferences, whether you like it or not! This vulnerability allows apps to keep tabs on you just like that, tracking your behavior even when you think you’ve moved on. This vulnerability arises from improper handling of caching in iOS and iPadOS, allowing malicious apps to potentially track users across app installs, undermining user privacy.

What to do

If an attacker exploits this, they could gather data on your usage patterns, preferences, and habits without your consent or knowledge. This could lead to targeted advertising or worse, unauthorized data collection. The invasion of privacy here could be absolutely devastating! To protect against this issue, update your devices to iOS 26.1 and iPadOS 26.1 immediately. Regularly check for updates to ensure you have the latest security patches and consider reviewing your app permissions regularly! You’ve got this! Stay vigilant and keep your devices up to date for maximum protection. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00451 · 38.2th percentile
Published
2025-11-04T01:15Z
EPSS history
Timeline
  • 04 NOV 01:15Z
    The issue was addressed with improved handling of caches
    cvelistv5