CVE-2025-43455CWE-200information-disclosure

CVE-2025-43455

Medium · published November 4, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-11-04T07:15Z
Affected products (4)
ProductVersionsFixed in
apple/ipados< 26.126.1
apple/iphone_os< 26.126.1
apple/visionos< 26.126.1
apple/watchos< 26.126.1
References (4)
https://support.apple.com/en-us/125632 · [email protected]https://support.apple.com/en-us/125634 · [email protected]https://support.apple.com/en-us/125638 · [email protected]https://support.apple.com/en-us/125639 · [email protected]
EPSS history
Timeline
  • 04 NOV 01:16Z
    A privacy issue was addressed with improved checks
    cvelistv5